denotational evaluation of commands with failures