ebm-cons(avols0), ebm-cons(avols), avols ⊆ avols0 ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0⟩ true