| ⌊err0⌋ ⊦ ⟨choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then avol := fill(mkavolume(m), unmapped) else avol := ?⟩ (avol1 = avol ∧ err0 = err) |
⌊err1⌋ ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then avol := fill(mkavolume(m), unmapped) else avol := ?⟩ (avol1 = avol ∧ err1 = err)