| ebm-cons(avols), avols ⊆ avols0, ebm-cons(avols) → ebm-cons(avols0) ⊦ ⟨if ¬ v ∈ avols then {fail_or_success#(; ; err); if err = ESUCCESS then avols[v] := fill(mkabstractvolume(n), erased)} else abort⟩ (avols ⊆ avols0 ∧ (ebm-cons(avols) → ebm-cons(avols0))), v ∈ avols |
ebm-cons(avols), avols ⊆ avols0, ebm-cons(avols) → ebm-cons(avols0) ⊦ ⟨fail_or_success#(; ; err); if err = ESUCCESS then avols[v] := fill(mkabstractvolume(n), erased)⟩ (avols ⊆ avols0 ∧ (ebm-cons(avols) → ebm-cons(avols0))), v ∈ avols