| boolvar0 ↔ boolvar2, boolvar ↔ boolvar1, key.inode?, fo.inodes?, ro.inodes?, log-cons(log, fs), ri-inj(fi), ri-inj(ri) ⊦ ⟪if key.inode? then boolvar := key ∈ ro else abort⟫ true |
boolvar ↔ boolvar1, boolvar0 ↔ boolvar2, key.inode?, ro.inodes?, fo.inodes?, log-cons(log, fs), ri-inj(ri), ri-inj(fi) ⊦ ⟪boolvar := key ∈ ro⟫ true