| avols = avols0, err = err0, err = ESUCCESS, ebm-cons(avols0), ebm-cons(avols1), default-volid ∈ avols1, avols1 ⊆ avols0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪v := default-volid⟫ (err = ESUCCESS → default-volid ∈ avols ∧ v = default-volid ∧ ebm-cons(avols)) |
Used simplifier rules: ⊦ ¬ ⌊ESUCCESS⌋ ; (s)% ⊦ avols0 ⊆ avols1 ∧ v ∈ avols0 → v ∈ avols1; (ss)