| ⊦ ⟨choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then ri := ∅, fs := ∅, fi := ∅, fo := ∅, ro := ∅, log := [], jvalid := true else ri := ?, fs := ?, fi := ?, fo := ?, ro := ?, log := ?, jvalid := ?⟩ (∅ = ro ∧ ∅ = fo ∧ ∅ = ri ∧ ∅ = fi ∧ log = [] ∧ fs = ∅ ∧ ESUCCESS = err) |
⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then ri := ∅, fs := ∅, fi := ∅, fo := ∅, ro := ∅, log := [], jvalid := true else ri := ?, fs := ?, fi := ?, fo := ?, ro := ?, log := ?, jvalid := ?⟩ (∅ = ro ∧ ∅ = fo ∧ ∅ = ri ∧ ∅ = fi ∧ log = [] ∧ fs = ∅ ∧ ESUCCESS = err)