| boolvar ↔ true, key.inode?, fo.inodes?, ro.inodes?, log-cons(log, fs), ri-inj(fi), ri-inj(ri) ⊦ ⟨if key.inode? then ro := ro ++ key else abort⟩ true |
boolvar ↔ true, key.inode?, ro.inodes?, fo.inodes?, log-cons(log, fs), ri-inj(ri), ri-inj(fi) ⊦ ⟨ro := ro ++ key⟩ true