| ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪err := err0; if err = ESUCCESS then choose apebs0 with ubi-io-initial(apebs0) in apebs := apebs0 else apebs := ?⟫ (err = ESUCCESS → ubi-io-inv(apebs)) |
err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪if err = ESUCCESS then choose apebs0 with ubi-io-initial(apebs0) in apebs := apebs0 else apebs := ?⟫ (err = ESUCCESS → ubi-io-inv(apebs))