| ⊦ ⟪mtd_asm_init#(; ; pebs, err)⟫ ((err = ESUCCESS → mtd-cons(pebs)) ∧ (err = ESUCCESS ∨ ⌊err⌋ )) |
⊦ ⟪fail_or_success#(; ; err); choose pebs with err = ESUCCESS → mtd-cons(pebs) in pebs0 := pebs⟫ ((err = ESUCCESS → mtd-cons(pebs0)) ∧ (err = ESUCCESS ∨ ⌊err⌋ ))
Used simplifier rules: init: ⊦ ;