((r => o0 * P))(H) ⊦ ⟪if ¬ r ∈ H then abort else o := H[r]⟫ (o0 = o)
Used simplifier rules: read(r, H; o){if ¬ r ∈ H then abort else o := H[r]};