(Program
  (Begin
    (Identifier)
  { (Ensure)
  ->(Ensure
      (Identifier)) }))