| n < # apebs, ubi-io-inv(apebs) ⊦ ⟨choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then isbad := apebs[n].bad else isbad := ?⟩ true |
n < # apebs, ubi-io-inv(apebs) ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then isbad := apebs[n].bad else isbad := ?⟩ true