Predicate_transformer_semantics