| boolvar0 ↔ true, boolvar ↔ boolvar1, key.inode?, fo.inodes?, ro.inodes?, log-cons(log, fs), ri-inj(fi), ri-inj(ri) ⊦ ⟨if key.inode? then boolvar := key ∈ ro else abort⟩ true |
boolvar ↔ boolvar1, boolvar0 ↔ true, key.inode?, ro.inodes?, fo.inodes?, log-cons(log, fs), ri-inj(ri), ri-inj(fi) ⊦ ⟨boolvar := key ∈ ro⟩ true