| mtd-cons(pebs), ubi-io-initial(pebs) ⊦ ⟨choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then choose apebs0 with ubi-io-initial(apebs0) in apebs := apebs0 else apebs := ?⟩ (abs(pebs, apebs) ∧ ESUCCESS = err) |
mtd-cons(pebs), ubi-io-initial(pebs) ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then choose apebs0 with ubi-io-initial(apebs0) in apebs := apebs0 else apebs := ?⟩ (abs(pebs, apebs) ∧ ESUCCESS = err)