| ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪err := err0; if err = ESUCCESS then avol := fill(mkavolume(m), unmapped) else avol := ?⟫ (err = ESUCCESS → ebm-vol-inv(avol)) |
err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪if err = ESUCCESS then avol := fill(mkavolume(m), unmapped) else avol := ?⟫ (err = ESUCCESS → ebm-vol-inv(avol))