| boolvar ↔ true, key.inode?, fo.inodes?, ro.inodes?, log-cons(log, fs), ri-inj(fi), ri-inj(ri) ⊦ ⟨if key.inode? then ro := ro -- key else abort⟩ true |
boolvar ↔ true, key.inode?, ro.inodes?, fo.inodes?, log-cons(log, fs), ri-inj(ri), ri-inj(fi) ⊦ ⟨ro := ro -- key⟩ true