| err = ESUCCESS, err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪choose apebs0 with ubi-io-initial(apebs0) in apebs := apebs0⟫ (err = ESUCCESS → ubi-io-inv(apebs)) |
err = err0, err = ESUCCESS, ubi-io-initial(apebs0), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪apebs := apebs0⟫ (err = ESUCCESS → ubi-io-inv(apebs))
err = err0, err = ESUCCESS, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ∃ apebs0. ubi-io-initial(apebs0)