| err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪if err = ESUCCESS then avol := fill(mkavolume(m), unmapped) else avol := ?⟫ (err = ESUCCESS → ebm-vol-inv(avol)) |
err = ESUCCESS, err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪avol := fill(mkavolume(m), unmapped)⟫ (err = ESUCCESS → ebm-vol-inv(avol))
err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪avol := ?⟫ (err = ESUCCESS → ebm-vol-inv(avol)), err = ESUCCESS