(Program
  (Begin
    (Identifier)
  { (Ensure
      (Identifier))
  ->(Ensure) }))