m < # pebs, mtd-cons(pebs) ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then isbad := pebs[m].bad else isbad := ?⟩ true