| ⌊err1⌋ ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then ri := ∅, fs := ∅, fi := ∅, fo := ∅, ro := ∅, log := [], jvalid := true else ri := ?, fs := ?, fi := ?, fo := ?, ro := ?, log := ?, jvalid := ?⟩ (ri1 = ri ∧ fi0 = fi ∧ ro1 = ro ∧ fo1 = fo ∧ fs1 = fs ∧ log1 = log ∧ (jvalid1 ↔ jvalid) ∧ err1 = err) |
⌊err1⌋ ⊦ (⌊err1⌋ ∨ err1 = ESUCCESS) ∧ ⟨err := err1; if err = ESUCCESS then ri := ∅, fs := ∅, fi := ∅, fo := ∅, ro := ∅, log := [], jvalid := true else ri := ?, fs := ?, fi := ?, fo := ?, ro := ?, log := ?, jvalid := ?⟩ (ri1 = ri ∧ fi0 = fi ∧ ro1 = ro ∧ fo1 = fo ∧ fs1 = fs ∧ log1 = log ∧ (jvalid1 ↔ jvalid) ∧ err1 = err)
Used terms: err1