n < # apebs, ubi-io-inv(apebs) ⊦ ⟨if EIO = ESUCCESS then isbad := apebs[n].bad else isbad := ?⟩ true