| err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪if err = ESUCCESS then avols := ∅ else avols := ?⟫ (err = ESUCCESS → ebm-cons(avols)) |
err = ESUCCESS, err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪avols := ∅⟫ (err = ESUCCESS → ebm-cons(avols))
err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪avols := ?⟫ (err = ESUCCESS → ebm-cons(avols)), err = ESUCCESS