| ebm-cons(avols), avols ⊆ avols0, ebm-cons(avols) → ebm-cons(avols0) ⊦ ⟨ebm_recover#(; avols; err)⟩ (avols ⊆ avols0 ∧ (ebm-cons(avols) → ebm-cons(avols0))) |
ebm-cons(avols), ebm-cons(avols0), avols ⊆ avols0 ⊦ ⟨ebm_recover#(; avols; err)⟩ (avols ⊆ avols0)