| jvalid ↔ jvalid0, ax = log, gndx = [], gstore0 = gstore2, jro = ginval, lnum = n, inv(gstore2), n ∈ gstore2 ⊦ ⟪fail_or_success#(; ; err); if err = ESUCCESS then ax := ax + gstore0[lnum].ladrlist.to-adr(lnum), gndx := gndx + gstore0[lnum].gndlist else ax := ?, gndx := ?; if err = ESUCCESS then {jvalid := false; log := ax; while ¬ jvalid ∧ gndx ≠ [] do {/* (term-remove-nonend-blocks: invariant # gndx ≤ # log ∧ inv(gstore2) wfbound (jvalid ⊃ 0;# gndx)) */; if gndx.last.end then jvalid := true else {log := log.butlast; gndx := gndx.butlast}}}⟫ true, n ∈ ginval |
inv(gstore2), n ∈ gstore2, ¬ n ∈ ginval ⊦ ⟪fail_or_success#(; ; err); gndx := []; if err = ESUCCESS then ax := ax + gstore2[n].ladrlist.to-adr(n), gndx := gndx + gstore2[n].gndlist else ax := ?, gndx := ?; if err = ESUCCESS then {jvalid := false; log := ax; while ¬ jvalid ∧ gndx ≠ [] do {/* (term-remove-nonend-blocks: invariant # gndx ≤ # log ∧ inv(gstore2) wfbound (jvalid ⊃ 0;# gndx)) */; if gndx.last.end then jvalid := true else {log := log.butlast; gndx := gndx.butlast}}}⟫ true