| adr0 = adr, lpt0 = lpt, m0 = m3, m1 = LEB_SIZE, m2 = # lpt ⊦ ⟪fail_or_success#(; ; err); if err = ESUCCESS then {avol := fill(mkavolume(m2), unmapped); adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ∅} else avol := ?, adr := ?, m := ?, plog := ?, lpt := ?, ns := ?⟫ (err = ESUCCESS → ebm-vol-inv(avol) ∧ # lpt = # avol) |
⊦ ⟪fail_or_success#(; ; err); lpt0 := lpt; if err = ESUCCESS then {avol := fill(mkavolume(# lpt), unmapped); adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ∅} else avol := ?, adr := ?, m := ?, plog := ?, lpt := ?, ns := ?⟫ (err = ESUCCESS → ebm-vol-inv(avol) ∧ # lpt = # avol)