| ⊦ ⟪choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; avols := ∅; if err = ESUCCESS then avols[default-volid] := fill(mkabstractvolume(m), erased)⟫ ( (err = ESUCCESS → ⟨ebm_avol_format#(m; ; avol0, err1)⟩ (avol0 = abs(avols[default-volid]) ∧ ESUCCESS = err1)) ∧ (err ≠ ESUCCESS → (∀ avol. ⟨ebm_avol_format#(m; ; avol0, err1)⟩ (avol = avol0 ∧ err = err1)))) |
⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪err := err0; avols := ∅; if err = ESUCCESS then avols[default-volid] := fill(mkabstractvolume(m), erased)⟫ ( (err = ESUCCESS → ⟨ebm_avol_format#(m; ; avol0, err1)⟩ (avol0 = abs(avols[default-volid]) ∧ ESUCCESS = err1)) ∧ (err ≠ ESUCCESS → (∀ avol. ⟨ebm_avol_format#(m; ; avol0, err1)⟩ (avol = avol0 ∧ err = err1))))
⊦ ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS