| err = err0, lpt0 = lpt, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪if err = ESUCCESS then {avol := fill(mkavolume(# lpt), unmapped); adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ∅} else avol := ?, adr := ?, m := ?, plog := ?, lpt := ?, ns := ?⟫ (err = ESUCCESS → ebm-vol-inv(avol) ∧ # lpt = # avol) |
err = ESUCCESS, err = err0, lpt0 = lpt, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪avol := fill(mkavolume(# lpt), unmapped); adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ∅⟫ (err = ESUCCESS → ebm-vol-inv(avol) ∧ # lpt = # avol)
err = err0, lpt0 = lpt, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪avol := ?, adr := ?, m := ?, plog := ?, lpt := ?, ns := ?⟫ (err = ESUCCESS → ebm-vol-inv(avol) ∧ # lpt = # avol), err = ESUCCESS