| fi0 = fi, fo0 = fo, fs0 = fs, log0 = log, ro.inodes?, fo.inodes?, log-cons(log, fs), ri-cons(ri, fs), ri-inj(ri), ri-inj(fi) ⊦ ∃ as. as ∩ range ri = ∅ ∧ ⟨fi := ri, fo := ro, fs := fs \ as, log := [], err := ESUCCESS; boolvar := true⟩ (boolvar ∧ fi0 = fi ∧ fo0 = fo ∧ fs0 = fs ∧ log0 = log), ⟨fail#(; ; err); boolvar := ?⟩ boolvar |
fo.inodes?, ro.inodes?, log-cons(log, fs), ri-cons(ri, fs), ri-inj(fi), ri-inj(ri) ⊦ ∃ as. as ∩ range ri = ∅ ∧ ⟨fi1 := ri, fo1 := ro, fs1 := fs \ as, log1 := [], err := ESUCCESS; boolvar := true⟩ (boolvar ∧ fi = fi1 ∧ fo = fo1 ∧ fs = fs1 ∧ log = log1), ⟨fail#(; ; err); boolvar := ?⟩ boolvar