why3session.xml 83.6 KB
Newer Older
1 2 3
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE why3session PUBLIC "-//Why3//proof session v5//EN"
"http://why3.lri.fr/why3session.dtd">
4
<why3session shape_version="5">
5
<prover id="0" name="Eprover" version="1.9.1-001" timelimit="5" steplimit="0" memlimit="2000"/>
6
<prover id="1" name="CVC4" version="1.4" timelimit="5" steplimit="0" memlimit="1000"/>
MARCHE Claude's avatar
MARCHE Claude committed
7
<prover id="2" name="Alt-Ergo" version="2.2.0" timelimit="1" steplimit="0" memlimit="1000"/>
8 9
<prover id="3" name="Z3" version="4.5.0" timelimit="5" steplimit="0" memlimit="1000"/>
<prover id="4" name="Alt-Ergo" version="2.0.0" timelimit="5" steplimit="0" memlimit="1000"/>
MARCHE Claude's avatar
MARCHE Claude committed
10
<prover id="5" name="CVC4" version="1.6" timelimit="1" steplimit="0" memlimit="1000"/>
11 12 13 14 15 16 17 18 19
<file name="../verifythis_2018_array_based_queuing_lock_2.mlw" proved="true">
<theory name="ABQL" proved="true">
 <goal name="VC tick" expl="VC for tick" proved="true">
 <proof prover="3"><result status="valid" time="0.01"/></proof>
 </goal>
 <goal name="VC fetch_and_add" expl="VC for fetch_and_add" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="VC fetch_and_add.0" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
20
   <goal name="VC fetch_and_add.0.0" expl="assertion" proved="true">
21
   <transf name="subst" proved="true" arg1="a">
22
    <goal name="VC fetch_and_add.0.0.0" expl="assertion" proved="true">
23
    <transf name="apply" proved="true" arg1="Div_mod">
Sylvain Dailler's avatar
Sylvain Dailler committed
24
     <goal name="VC fetch_and_add.0.0.0.0" expl="apply premises" proved="true">
25 26 27 28 29 30 31 32 33 34 35 36 37
     <proof prover="3"><result status="valid" time="0.02"/></proof>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="VC fetch_and_add.0.1" expl="VC for fetch_and_add" proved="true">
   <proof prover="3"><result status="valid" time="0.01"/></proof>
   </goal>
   <goal name="VC fetch_and_add.0.2" expl="VC for fetch_and_add" proved="true">
   <proof prover="3"><result status="valid" time="0.02"/></proof>
   </goal>
   <goal name="VC fetch_and_add.0.3" expl="VC for fetch_and_add" proved="true">
38
   <proof prover="4"><result status="valid" time="0.00" steps="6"/></proof>
39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67
   </goal>
   <goal name="VC fetch_and_add.0.4" expl="VC for fetch_and_add" proved="true">
   <proof prover="3"><result status="valid" time="0.02"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="VC fetch_and_add.1" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.01"/></proof>
  </goal>
  <goal name="VC fetch_and_add.2" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="VC fetch_and_add.3" expl="postcondition" proved="true">
  <proof prover="3"><result status="valid" time="0.01"/></proof>
  </goal>
  <goal name="VC fetch_and_add.4" expl="postcondition" proved="true">
  <proof prover="3"><result status="valid" time="0.01"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="Sorted.Transitive.Trans" proved="true">
 <proof prover="3"><result status="valid" time="0.03"/></proof>
 </goal>
 <goal name="VC last_push" expl="VC for last_push" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="VC last_push.0" expl="variant decrease" proved="true">
  <proof prover="3"><result status="valid" time="0.03"/></proof>
  </goal>
  <goal name="VC last_push.1" expl="postcondition" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
68
  <proof prover="1"><result status="valid" time="0.18"/></proof>
69 70 71 72 73 74 75 76 77
  </goal>
 </transf>
 </goal>
 <goal name="VC consecutive_last_push" expl="VC for consecutive_last_push" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="VC consecutive_last_push.0" expl="variant decrease" proved="true">
  <proof prover="3"><result status="valid" time="0.03"/></proof>
  </goal>
  <goal name="VC consecutive_last_push.1" expl="precondition" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
78
  <proof prover="4"><result status="valid" time="0.02" steps="76"/></proof>
79 80
  </goal>
  <goal name="VC consecutive_last_push.2" expl="precondition" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
81
  <proof prover="4"><result status="valid" time="0.23" steps="162"/></proof>
82 83 84 85 86 87 88 89 90 91 92 93 94 95 96
  </goal>
  <goal name="VC consecutive_last_push.3" expl="postcondition" proved="true">
  <proof prover="3"><result status="valid" time="0.47"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="hd_push" proved="true">
 <proof prover="3"><result status="valid" time="0.17"/></proof>
 </goal>
 <goal name="VC consecutive_implies_sorted" expl="VC for consecutive_implies_sorted" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="VC consecutive_implies_sorted.0" expl="variant decrease" proved="true">
  <proof prover="3"><result status="valid" time="0.04"/></proof>
  </goal>
  <goal name="VC consecutive_implies_sorted.1" expl="precondition" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
97
  <proof prover="4"><result status="valid" time="0.02" steps="76"/></proof>
98 99
  </goal>
  <goal name="VC consecutive_implies_sorted.2" expl="postcondition" proved="true">
100
  <proof prover="4"><result status="valid" time="0.02" steps="51"/></proof>
101 102 103 104 105 106 107 108 109
  </goal>
 </transf>
 </goal>
 <goal name="VC numof_equiv" expl="VC for numof_equiv" proved="true">
 <proof prover="3"><result status="valid" time="0.35"/></proof>
 </goal>
 <goal name="VC numof_add" expl="VC for numof_add" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="VC numof_add.0" expl="assertion" proved="true">
110
  <proof prover="4"><result status="valid" time="0.07" steps="155"/></proof>
111 112
  </goal>
  <goal name="VC numof_add.1" expl="assertion" proved="true">
113
  <proof prover="4"><result status="valid" time="0.15" steps="249"/></proof>
114 115
  </goal>
  <goal name="VC numof_add.2" expl="assertion" proved="true">
116
  <proof prover="4"><result status="valid" time="0.08" steps="224"/></proof>
117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134
  </goal>
  <goal name="VC numof_add.3" expl="postcondition" proved="true">
  <proof prover="3"><result status="valid" time="0.44"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="mod_diff" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="mod_diff.0" proved="true">
  <proof prover="3"><result status="valid" time="0.03"/></proof>
  </goal>
  <goal name="mod_diff.1" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="mod_diff.2" proved="true">
  <proof prover="3"><result status="valid" time="0.15"/></proof>
  </goal>
  <goal name="mod_diff.3" proved="true">
135
  <proof prover="4"><result status="valid" time="0.02" steps="12"/></proof>
136 137 138 139 140 141 142 143 144 145 146 147
  </goal>
  <goal name="mod_diff.4" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="mod_diff.5" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="VC main" expl="VC for main" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="VC main.0" expl="array creation size" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
148
  <proof prover="3"><result status="valid" time="0.03"/></proof>
149 150 151 152 153
  </goal>
  <goal name="VC main.1" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.18"/></proof>
  </goal>
  <goal name="VC main.2" expl="precondition" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
154
  <proof prover="3"><result status="valid" time="0.30"/></proof>
155 156
  </goal>
  <goal name="VC main.3" expl="array creation size" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
157
  <proof prover="3"><result status="valid" time="0.02"/></proof>
158 159
  </goal>
  <goal name="VC main.4" expl="array creation size" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
160
  <proof prover="3"><result status="valid" time="0.05"/></proof>
161 162
  </goal>
  <goal name="VC main.5" expl="array creation size" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
163
  <proof prover="4" memlimit="2000"><result status="valid" time="0.01" steps="14"/></proof>
164 165
  </goal>
  <goal name="VC main.6" expl="safety" proved="true">
166
  <proof prover="4"><result status="valid" time="0.02" steps="29"/></proof>
167 168
  </goal>
  <goal name="VC main.7" expl="loop invariant init" proved="true">
169
  <proof prover="4"><result status="valid" time="0.01" steps="16"/></proof>
170 171 172 173 174 175 176 177 178 179 180
  </goal>
  <goal name="VC main.8" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="VC main.9" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.04"/></proof>
  </goal>
  <goal name="VC main.10" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.01"/></proof>
  </goal>
  <goal name="VC main.11" expl="loop invariant init" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
181
  <proof prover="4"><result status="valid" time="0.10" steps="111"/></proof>
182 183 184 185 186
  </goal>
  <goal name="VC main.12" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.01"/></proof>
  </goal>
  <goal name="VC main.13" expl="loop invariant init" proved="true">
187
  <proof prover="4" memlimit="2000"><result status="valid" time="0.03" steps="56"/></proof>
188 189 190
  </goal>
  <goal name="VC main.14" expl="loop invariant init" proved="true">
  <transf name="split_vc" proved="true" >
191 192
   <goal name="VC main.14.0" expl="loop invariant init" proved="true">
   <proof prover="4" memlimit="2000"><result status="valid" time="0.02" steps="44"/></proof>
193
   </goal>
194 195
   <goal name="VC main.14.1" expl="loop invariant init" proved="true">
   <proof prover="4"><result status="valid" time="0.02" steps="45"/></proof>
196 197 198 199
   </goal>
  </transf>
  </goal>
  <goal name="VC main.15" expl="loop invariant init" proved="true">
200
  <proof prover="4"><result status="valid" time="0.01" steps="29"/></proof>
201 202 203 204 205
  </goal>
  <goal name="VC main.16" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.04"/></proof>
  </goal>
  <goal name="VC main.17" expl="loop invariant init" proved="true">
206
  <proof prover="4"><result status="valid" time="0.01" steps="31"/></proof>
207 208
  </goal>
  <goal name="VC main.18" expl="loop invariant init" proved="true">
209
  <proof prover="4"><result status="valid" time="0.12" steps="18"/></proof>
210 211
  </goal>
  <goal name="VC main.19" expl="loop invariant init" proved="true">
212
  <proof prover="4"><result status="valid" time="0.16" steps="140"/></proof>
213 214
  </goal>
  <goal name="VC main.20" expl="loop invariant init" proved="true">
215
  <proof prover="4"><result status="valid" time="0.02" steps="27"/></proof>
216 217 218 219 220 221 222 223 224 225 226 227 228 229 230
  </goal>
  <goal name="VC main.21" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="VC main.22" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.04"/></proof>
  </goal>
  <goal name="VC main.23" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.01"/></proof>
  </goal>
  <goal name="VC main.24" expl="loop invariant init" proved="true">
  <proof prover="3"><result status="valid" time="0.04"/></proof>
  </goal>
  <goal name="VC main.25" expl="liveness" proved="true">
  <transf name="right" proved="true" >
Sylvain Dailler's avatar
Sylvain Dailler committed
231
   <goal name="VC main.25.0" expl="right case" proved="true">
232
   <transf name="split_vc" proved="true" >
Sylvain Dailler's avatar
Sylvain Dailler committed
233
    <goal name="VC main.25.0.0" expl="right case" proved="true">
234 235
    <transf name="exists" proved="true" arg1="0">
     <goal name="VC main.25.0.0.0" proved="true">
236
     <proof prover="4"><result status="valid" time="0.01" steps="27"/></proof>
237 238 239
     </goal>
    </transf>
    </goal>
Sylvain Dailler's avatar
Sylvain Dailler committed
240
    <goal name="VC main.25.0.1" expl="right case" proved="true">
241 242 243 244 245 246 247 248 249 250 251 252 253
    <proof prover="3"><result status="valid" time="0.02"/></proof>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="VC main.26" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.03"/></proof>
  </goal>
  <goal name="VC main.27" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="VC main.28" expl="safety" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
254
  <proof prover="4"><result status="valid" time="0.05" steps="116"/></proof>
255 256
  </goal>
  <goal name="VC main.29" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
257
  <proof prover="3"><result status="valid" time="0.02"/></proof>
258 259
  </goal>
  <goal name="VC main.30" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
260
  <proof prover="4" memlimit="2000"><result status="valid" time="0.32" steps="346"/></proof>
261 262
  </goal>
  <goal name="VC main.31" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
263
  <proof prover="4"><result status="valid" time="0.02" steps="52"/></proof>
264 265
  </goal>
  <goal name="VC main.32" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
266
  <proof prover="4" memlimit="2000"><result status="valid" time="0.33" steps="970"/></proof>
267 268
  </goal>
  <goal name="VC main.33" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
269
  <proof prover="4" memlimit="2000"><result status="valid" time="0.04" steps="84"/></proof>
270 271
  </goal>
  <goal name="VC main.34" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
272
  <proof prover="4"><result status="valid" time="0.06" steps="57"/></proof>
273 274
  </goal>
  <goal name="VC main.35" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
275 276 277 278 279
  <transf name="split_all_full" proved="true" >
   <goal name="VC main.35.0" expl="VC for main" proved="true">
   <proof prover="4" timelimit="10" memlimit="4000"><result status="valid" time="0.10" steps="78"/></proof>
   </goal>
  </transf>
280 281
  </goal>
  <goal name="VC main.36" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
282
  <proof prover="4"><result status="valid" time="0.15" steps="323"/></proof>
283 284 285 286
  </goal>
  <goal name="VC main.37" expl="loop invariant preservation" proved="true">
  <transf name="split_all_full" proved="true" >
   <goal name="VC main.37.0" expl="VC for main" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
287
   <proof prover="4"><result status="valid" time="0.02" steps="41"/></proof>
288 289
   </goal>
   <goal name="VC main.37.1" expl="VC for main" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
290
   <proof prover="4" timelimit="10" memlimit="4000"><result status="valid" time="0.33" steps="719"/></proof>
291 292
   </goal>
   <goal name="VC main.37.2" expl="VC for main" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
293
   <proof prover="4" timelimit="10" memlimit="4000"><result status="valid" time="0.07" steps="188"/></proof>
294 295 296 297
   </goal>
  </transf>
  </goal>
  <goal name="VC main.38" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
298
  <proof prover="5"><result status="valid" time="0.18"/></proof>
299 300
  </goal>
  <goal name="VC main.39" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
301 302 303 304 305 306 307 308
  <transf name="split_all_full" proved="true" >
   <goal name="VC main.39.0" expl="VC for main" proved="true">
   <proof prover="5"><result status="valid" time="0.16"/></proof>
   </goal>
   <goal name="VC main.39.1" expl="VC for main" proved="true">
   <proof prover="5"><result status="valid" time="0.53"/></proof>
   </goal>
  </transf>
309 310
  </goal>
  <goal name="VC main.40" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
311
  <proof prover="4"><result status="valid" time="0.02" steps="32"/></proof>
312 313
  </goal>
  <goal name="VC main.41" expl="loop invariant preservation" proved="true">
314
  <proof prover="4"><result status="valid" time="0.06" steps="138"/></proof>
315 316
  </goal>
  <goal name="VC main.42" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
317
  <proof prover="4"><result status="valid" time="0.03" steps="48"/></proof>
318 319
  </goal>
  <goal name="VC main.43" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
320
  <proof prover="3"><result status="valid" time="0.01"/></proof>
321 322
  </goal>
  <goal name="VC main.44" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
323
  <proof prover="3"><result status="valid" time="0.01"/></proof>
324 325
  </goal>
  <goal name="VC main.45" expl="loop invariant preservation" proved="true">
326
  <proof prover="3"><result status="valid" time="0.04"/></proof>
327 328
  </goal>
  <goal name="VC main.46" expl="loop invariant preservation" proved="true">
329
  <proof prover="4"><result status="valid" time="0.13" steps="33"/></proof>
330 331
  </goal>
  <goal name="VC main.47" expl="liveness" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349
  <transf name="revert" proved="true" arg1="H41">
   <goal name="VC main.47.0" expl="liveness" proved="true">
   <transf name="split_goal_full" proved="true" >
    <goal name="VC main.47.0.0" expl="liveness" proved="true">
    <proof prover="4" memlimit="2000"><result status="valid" time="0.04" steps="48"/></proof>
    </goal>
    <goal name="VC main.47.0.1" expl="liveness" proved="true">
    <proof prover="3"><result status="valid" time="0.04"/></proof>
    </goal>
    <goal name="VC main.47.0.2" expl="liveness" proved="true">
    <proof prover="4" memlimit="2000"><result status="valid" time="0.03" steps="144"/></proof>
    </goal>
    <goal name="VC main.47.0.3" expl="liveness" proved="true">
    <proof prover="4" memlimit="2000"><result status="valid" time="0.04" steps="109"/></proof>
    </goal>
   </transf>
   </goal>
  </transf>
350 351 352
  </goal>
  <goal name="VC main.48" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
353 354
   <goal name="VC main.48.0" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.02" steps="31"/></proof>
355
   </goal>
356 357
   <goal name="VC main.48.1" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.02" steps="31"/></proof>
358
   </goal>
359
   <goal name="VC main.48.2" expl="assertion" proved="true">
360
   <proof prover="4"><result status="valid" time="0.01" steps="36"/></proof>
361
   </goal>
362 363
   <goal name="VC main.48.3" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.05" steps="45"/></proof>
364
   </goal>
365 366
   <goal name="VC main.48.4" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.02" steps="45"/></proof>
367
   </goal>
368 369
   <goal name="VC main.48.5" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.07" steps="116"/></proof>
370
   </goal>
371 372
   <goal name="VC main.48.6" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.13" steps="113"/></proof>
373
   </goal>
374 375
   <goal name="VC main.48.7" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.03" steps="52"/></proof>
376
   </goal>
377 378
   <goal name="VC main.48.8" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.06" steps="146"/></proof>
379
   </goal>
380
   <goal name="VC main.48.9" expl="assertion" proved="true">
381 382
   <proof prover="3"><result status="valid" time="0.03"/></proof>
   </goal>
383 384
   <goal name="VC main.48.10" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.03" steps="102"/></proof>
385
   </goal>
386 387
   <goal name="VC main.48.11" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.29" steps="326"/></proof>
388
   </goal>
389 390
   <goal name="VC main.48.12" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.02" steps="50"/></proof>
391
   </goal>
392 393
   <goal name="VC main.48.13" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.02" steps="50"/></proof>
394
   </goal>
395 396
   <goal name="VC main.48.14" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.10" steps="244"/></proof>
397
   </goal>
398 399
   <goal name="VC main.48.15" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.17" steps="132"/></proof>
400
   </goal>
401 402
   <goal name="VC main.48.16" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.02" steps="44"/></proof>
403
   </goal>
404 405
   <goal name="VC main.48.17" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.01" steps="34"/></proof>
406
   </goal>
407 408
   <goal name="VC main.48.18" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.02" steps="38"/></proof>
409 410 411 412
   </goal>
  </transf>
  </goal>
  <goal name="VC main.49" expl="assertion" proved="true">
413
  <proof prover="4"><result status="valid" time="0.04" steps="142"/></proof>
414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431
  </goal>
  <goal name="VC main.50" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.03"/></proof>
  </goal>
  <goal name="VC main.51" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="VC main.52" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="VC main.53" expl="assertion" proved="true">
  <proof prover="3"><result status="valid" time="0.03"/></proof>
  </goal>
  <goal name="VC main.54" expl="assertion" proved="true">
  <proof prover="3"><result status="valid" time="0.03"/></proof>
  </goal>
  <goal name="VC main.55" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
432 433
   <goal name="VC main.55.0" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.04" steps="107"/></proof>
434
   </goal>
435 436
   <goal name="VC main.55.1" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.39" steps="246"/></proof>
437 438 439 440 441
   </goal>
  </transf>
  </goal>
  <goal name="VC main.56" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
442 443
   <goal name="VC main.56.0" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.03" steps="112"/></proof>
444
   </goal>
445
   <goal name="VC main.56.1" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
446
   <proof prover="4"><result status="valid" time="0.08" steps="123"/></proof>
447
   </goal>
448 449
   <goal name="VC main.56.2" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.04" steps="47"/></proof>
450
   </goal>
451 452
   <goal name="VC main.56.3" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.07" steps="48"/></proof>
453
   </goal>
454 455
   <goal name="VC main.56.4" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.10" steps="195"/></proof>
456
   </goal>
457
   <goal name="VC main.56.5" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
458
   <proof prover="4"><result status="valid" time="0.11" steps="203"/></proof>
459 460 461 462 463
   </goal>
  </transf>
  </goal>
  <goal name="VC main.57" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
464 465
   <goal name="VC main.57.0" expl="assertion" proved="true">
   <proof prover="3"><result status="valid" time="0.01"/></proof>
466
   </goal>
467
   <goal name="VC main.57.1" expl="assertion" proved="true">
468
   <transf name="rewrite" proved="true" arg1="H">
469
    <goal name="VC main.57.1.0" expl="assertion" proved="true">
470
    <transf name="apply" proved="true" arg1="consecutive_last_push">
Sylvain Dailler's avatar
Sylvain Dailler committed
471
     <goal name="VC main.57.1.0.0" expl="apply premises" proved="true">
472
     <proof prover="3"><result status="valid" time="0.03"/></proof>
473
     </goal>
Sylvain Dailler's avatar
Sylvain Dailler committed
474
     <goal name="VC main.57.1.0.1" expl="apply premises" proved="true">
475
     <proof prover="3"><result status="valid" time="0.01"/></proof>
476 477 478 479 480 481 482 483 484
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="VC main.58" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
485 486
   <goal name="VC main.58.0" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.08" steps="47"/></proof>
487
   </goal>
488 489
   <goal name="VC main.58.1" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.41" steps="591"/></proof>
490
   </goal>
491 492
   <goal name="VC main.58.2" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.19" steps="269"/></proof>
493
   </goal>
494 495
   <goal name="VC main.58.3" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.03" steps="59"/></proof>
496
   </goal>
497 498
   <goal name="VC main.58.4" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.12" steps="136"/></proof>
499
   </goal>
500 501
   <goal name="VC main.58.5" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.02" steps="48"/></proof>
502
   </goal>
503 504
   <goal name="VC main.58.6" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.03" steps="57"/></proof>
505
   </goal>
506
   <goal name="VC main.58.7" expl="assertion" proved="true">
507
   <proof prover="4"><result status="valid" time="0.08" steps="280"/></proof>
508 509 510 511 512
   </goal>
  </transf>
  </goal>
  <goal name="VC main.59" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
513 514
   <goal name="VC main.59.0" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.12" steps="50"/></proof>
515
   </goal>
516 517
   <goal name="VC main.59.1" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.03" steps="55"/></proof>
518
   </goal>
519 520
   <goal name="VC main.59.2" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.08" steps="160"/></proof>
521
   </goal>
522
   <goal name="VC main.59.3" expl="assertion" proved="true">
523
   <proof prover="4"><result status="valid" time="0.03" steps="55"/></proof>
524
   </goal>
525 526
   <goal name="VC main.59.4" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.04" steps="49"/></proof>
527
   </goal>
528
   <goal name="VC main.59.5" expl="assertion" proved="true">
529 530
   <proof prover="0"><result status="valid" time="0.03"/></proof>
   </goal>
531 532
   <goal name="VC main.59.6" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.10" steps="334"/></proof>
533
   </goal>
534 535 536 537
   <goal name="VC main.59.7" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.02" steps="49"/></proof>
   </goal>
   <goal name="VC main.59.8" expl="assertion" proved="true">
538
   <proof prover="0"><result status="valid" time="0.04"/></proof>
539 540 541 542 543
   </goal>
  </transf>
  </goal>
  <goal name="VC main.60" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
544 545
   <goal name="VC main.60.0" expl="assertion" proved="true">
   <proof prover="3"><result status="valid" time="0.08"/></proof>
546
   </goal>
547 548
   <goal name="VC main.60.1" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.60" steps="820"/></proof>
549
   </goal>
550 551
   <goal name="VC main.60.2" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.03" steps="62"/></proof>
552
   </goal>
553 554
   <goal name="VC main.60.3" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.04" steps="48"/></proof>
555
   </goal>
556 557
   <goal name="VC main.60.4" expl="assertion" proved="true">
   <proof prover="4"><result status="valid" time="0.03" steps="55"/></proof>
558
   </goal>
559
   <goal name="VC main.60.5" expl="assertion" proved="true">
560
   <proof prover="4"><result status="valid" time="0.04" steps="64"/></proof>
561 562 563 564
   </goal>
  </transf>
  </goal>
  <goal name="VC main.61" expl="safety" proved="true">
565
  <proof prover="4"><result status="valid" time="0.53" steps="742"/></proof>
566 567 568 569 570 571 572
  </goal>
  <goal name="VC main.62" expl="loop invariant preservation" proved="true">
  <proof prover="3"><result status="valid" time="0.01"/></proof>
  </goal>
  <goal name="VC main.63" expl="loop invariant preservation" proved="true">
  <transf name="case" proved="true" arg1="(b = tick.b1)">
   <goal name="VC main.63.0" expl="true case (loop invariant preservation)" proved="true">
573
   <proof prover="4"><result status="valid" time="0.25" steps="367"/></proof>
574 575 576 577 578 579 580 581 582 583 584 585
   </goal>
   <goal name="VC main.63.1" expl="false case (loop invariant preservation)" proved="true">
   <transf name="replace" proved="true" arg1="owners[b]" arg2="owners1[b]">
    <goal name="VC main.63.1.0" expl="false case (loop invariant preservation)" proved="true">
    <transf name="split_vc" proved="true" >
     <goal name="VC main.63.1.0.0" expl="VC for main" proved="true">
     <proof prover="3"><result status="valid" time="0.07"/></proof>
     </goal>
     <goal name="VC main.63.1.0.1" expl="VC for main" proved="true">
     <proof prover="3"><result status="valid" time="0.04"/></proof>
     </goal>
     <goal name="VC main.63.1.0.2" expl="VC for main" proved="true">
586
     <proof prover="4"><result status="valid" time="0.24" steps="344"/></proof>
587 588 589
     </goal>
     <goal name="VC main.63.1.0.3" expl="VC for main" proved="true">
     <transf name="assert" proved="true" arg1="( x1 &lt;&gt; th )">
Sylvain Dailler's avatar
Sylvain Dailler committed
590
      <goal name="VC main.63.1.0.3.0" expl="asserted formula" proved="true">
591 592 593 594 595 596 597
      <proof prover="3"><result status="valid" time="0.08"/></proof>
      </goal>
      <goal name="VC main.63.1.0.3.1" expl="VC for main" proved="true">
      <transf name="replace" proved="true" arg1="memo[x1]" arg2="memo1[x1]" arg3="in" arg4="H">
       <goal name="VC main.63.1.0.3.1.0" expl="VC for main" proved="true">
       <proof prover="3"><result status="valid" time="0.06"/></proof>
       </goal>
Sylvain Dailler's avatar
Sylvain Dailler committed
598
       <goal name="VC main.63.1.0.3.1.1" expl="equality hypothesis" proved="true">
599
       <proof prover="4"><result status="valid" time="0.05" steps="68"/></proof>
600 601 602 603 604 605 606
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
Sylvain Dailler's avatar
Sylvain Dailler committed
607
    <goal name="VC main.63.1.1" expl="equality hypothesis" proved="true">
608
    <proof prover="4"><result status="valid" time="0.04" steps="49"/></proof>
609 610 611 612 613 614
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="VC main.64" expl="loop invariant preservation" proved="true">
615
  <proof prover="4"><result status="valid" time="0.46" steps="732"/></proof>
616 617
  </goal>
  <goal name="VC main.65" expl="loop invariant preservation" proved="true">
618
  <proof prover="4"><result status="valid" time="0.86" steps="1709"/></proof>
619 620 621 622 623
  </goal>
  <goal name="VC main.66" expl="loop invariant preservation" proved="true">
  <proof prover="3"><result status="valid" time="0.03"/></proof>
  </goal>
  <goal name="VC main.67" expl="loop invariant preservation" proved="true">
624
  <proof prover="4"><result status="valid" time="0.18" steps="242"/></proof>
625 626
  </goal>
  <goal name="VC main.68" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
627
  <proof prover="4" memlimit="2000"><result status="valid" time="0.87" steps="361"/></proof>
628 629
  </goal>
  <goal name="VC main.69" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
630
  <proof prover="4" memlimit="2000"><result status="valid" time="0.88" steps="1114"/></proof>
631 632
  </goal>
  <goal name="VC main.70" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
633 634 635
  <transf name="split_vc" proved="true" >
   <goal name="VC main.70.0" expl="loop invariant preservation" proved="true">
   <proof prover="4"><result status="valid" time="0.73" steps="292"/></proof>
636
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
637 638
   <goal name="VC main.70.1" expl="loop invariant preservation" proved="true">
   <proof prover="4"><result status="valid" time="1.41" steps="1467"/></proof>
639
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
640 641
   <goal name="VC main.70.2" expl="loop invariant preservation" proved="true">
   <proof prover="4"><result status="valid" time="1.15" steps="1384"/></proof>
642 643 644 645 646 647
   </goal>
  </transf>
  </goal>
  <goal name="VC main.71" expl="loop invariant preservation" proved="true">
  <transf name="case" proved="true" arg1="th=th1">
   <goal name="VC main.71.0" expl="true case (loop invariant preservation)" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
648
   <proof prover="4"><result status="valid" time="0.08" steps="143"/></proof>
649 650 651 652 653 654
   </goal>
   <goal name="VC main.71.1" expl="false case (loop invariant preservation)" proved="true">
   <transf name="replace" proved="true" arg1="memo[th]" arg2="memo1[th]">
    <goal name="VC main.71.1.0" expl="false case (loop invariant preservation)" proved="true">
    <proof prover="3"><result status="valid" time="0.08"/></proof>
    </goal>
Sylvain Dailler's avatar
Sylvain Dailler committed
655
    <goal name="VC main.71.1.1" expl="equality hypothesis" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
656
    <proof prover="4"><result status="valid" time="0.04" steps="49"/></proof>
657 658 659 660 661 662
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="VC main.72" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
663 664 665 666 667 668 669 670 671 672 673 674 675
  <proof prover="0" timelimit="10" memlimit="1000"><result status="valid" time="1.63"/></proof>
  <transf name="split_all_full" proved="true" >
   <goal name="VC main.72.0" expl="VC for main" proved="true">
   <proof prover="5"><result status="valid" time="0.18"/></proof>
   </goal>
   <goal name="VC main.72.1" expl="VC for main" proved="true">
   <transf name="introduce_premises" proved="true" >
    <goal name="VC main.72.1.0" expl="VC for main" proved="true">
    <proof prover="2" timelimit="30" memlimit="4000"><result status="valid" time="11.81" steps="3770"/></proof>
    </goal>
   </transf>
   </goal>
  </transf>
676 677
  </goal>
  <goal name="VC main.73" expl="loop invariant preservation" proved="true">
678
  <proof prover="4"><result status="valid" time="0.11" steps="45"/></proof>
679 680
  </goal>
  <goal name="VC main.74" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
681
  <proof prover="4"><result status="valid" time="0.07" steps="53"/></proof>
682 683
  </goal>
  <goal name="VC main.75" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
684
  <proof prover="4" memlimit="2000"><result status="valid" time="1.45" steps="567"/></proof>
685 686
  </goal>
  <goal name="VC main.76" expl="loop invariant preservation" proved="true">
687
  <proof prover="4"><result status="valid" time="0.03" steps="65"/></proof>
688 689
  </goal>
  <goal name="VC main.77" expl="loop invariant preservation" proved="true">
690
  <transf name="split_vc" proved="true" >
691
   <goal name="VC main.77.0" expl="loop invariant preservation" proved="true">
692
   <transf name="assert" proved="true" arg1="(elts waiting_list &lt;&gt; Nil)">
Sylvain Dailler's avatar
Sylvain Dailler committed
693
    <goal name="VC main.77.0.0" expl="asserted formula" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
694
    <proof prover="4" memlimit="2000"><result status="valid" time="0.05" steps="70"/></proof>
695
    </goal>
696
    <goal name="VC main.77.0.1" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
697
    <proof prover="4" memlimit="2000"><result status="valid" time="0.04" steps="56"/></proof>
698 699 700 701
    </goal>
   </transf>
   </goal>
  </transf>
702 703
  </goal>
  <goal name="VC main.78" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
704 705 706
  <transf name="split_all_full" proved="true" >
   <goal name="VC main.78.0" expl="VC for main" proved="true">
   <proof prover="3"><result status="valid" time="0.04"/></proof>
707
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
708 709
   <goal name="VC main.78.1" expl="VC for main" proved="true">
   <proof prover="4" timelimit="10" memlimit="4000"><result status="valid" time="0.05" steps="296"/></proof>
710
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
711
   <goal name="VC main.78.2" expl="VC for main" proved="true">
712 713
   <proof prover="3"><result status="valid" time="0.01"/></proof>
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
714 715
   <goal name="VC main.78.3" expl="VC for main" proved="true">
   <proof prover="3"><result status="valid" time="0.01"/></proof>
716
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
717 718
   <goal name="VC main.78.4" expl="VC for main" proved="true">
   <proof prover="3"><result status="valid" time="0.04"/></proof>
719
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
720 721
   <goal name="VC main.78.5" expl="VC for main" proved="true">
   <proof prover="3"><result status="valid" time="0.03"/></proof>
722
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
723 724
   <goal name="VC main.78.6" expl="VC for main" proved="true">
   <proof prover="4"><result status="valid" time="0.08" steps="205"/></proof>
725 726 727 728
   </goal>
  </transf>
  </goal>
  <goal name="VC main.79" expl="loop invariant preservation" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
729
  <proof prover="4"><result status="valid" time="0.13" steps="217"/></proof>
730 731
  </goal>
  <goal name="VC main.80" expl="liveness" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
732
  <proof prover="4" memlimit="2000"><result status="valid" time="0.05" steps="52"/></proof>
733 734 735 736 737
  </goal>
  <goal name="VC main.81" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="VC main.82" expl="unreachable point" proved="true">
738
  <proof prover="4"><result status="valid" time="0.05" steps="108"/></proof>
739 740 741 742 743 744 745 746 747 748 749 750 751 752
  </goal>
  <goal name="VC main.83" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.03"/></proof>
  </goal>
  <goal name="VC main.84" expl="assertion" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="VC main.85" expl="index in array bounds" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="VC main.86" expl="precondition" proved="true">
  <proof prover="3"><result status="valid" time="0.03"/></proof>
  </goal>
  <goal name="VC main.87" expl="assertion" proved="true">
753
  <proof prover="4"><result status="valid" time="1.01" steps="729"/></proof>
754 755 756
  </goal>
  <goal name="VC main.88" expl="fairness" proved="true">
  <transf name="split_vc" proved="true" >
757
   <goal name="VC main.88.0" expl="fairness" proved="true">
758 759
   <proof prover="3"><result status="valid" time="0.04"/></proof>
   </goal>
760 761 762 763
   <goal name="VC main.88.1" expl="fairness" proved="true">
   <proof prover="3"><result status="valid" time="0.05"/></proof>
   </goal>
   <goal name="VC main.88.2" expl="fairness" proved="true">
764
   <proof prover="4"><result status="valid" time="0.12" steps="266"/></proof>
765
   </goal>
766 767
   <goal name="VC main.88.3" expl="fairness" proved="true">
   <proof prover="4"><result status="valid" time="0.33" steps="422"/></proof>
768 769 770 771 772
   </goal>
  </transf>
  </goal>
  <goal name="VC main.89" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
773
   <goal name="VC main.89.0" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
774
   <proof prover="4"><result status="valid" time="0.48" steps="1058"/></proof>
775
   </goal>
776
   <goal name="VC main.89.1" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
777
   <proof prover="4"><result status="valid" time="0.10" steps="39"/></proof>
778
   </goal>
779
   <goal name="VC main.89.2" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
780
   <proof prover="4"><result status="valid" time="1.63" steps="801"/></proof>
781
   </goal>
782
   <goal name="VC main.89.3" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
783
   <proof prover="4" memlimit="2000"><result status="valid" time="0.07" steps="152"/></proof>
784
   </goal>
785
   <goal name="VC main.89.4" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
786
   <proof prover="3"><result status="valid" time="0.04"/></proof>
787
   </goal>
788
   <goal name="VC main.89.5" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
789
   <proof prover="4"><result status="valid" time="0.04" steps="63"/></proof>
790
   </goal>
791 792
   <goal name="VC main.89.6" expl="assertion" proved="true">
   <proof prover="3"><result status="valid" time="0.08"/></proof>
793
   </goal>
794
   <goal name="VC main.89.7" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
795
   <proof prover="4"><result status="valid" time="0.03" steps="107"/></proof>
796
   </goal>
797
   <goal name="VC main.89.8" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
798
   <proof prover="4" memlimit="2000"><result status="valid" time="0.02" steps="44"/></proof>
799 800 801 802 803
   </goal>
  </transf>
  </goal>
  <goal name="VC main.90" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
804
   <goal name="VC main.90.0" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
805
   <proof prover="4"><result status="valid" time="0.02" steps="42"/></proof>
806
   </goal>
807
   <goal name="VC main.90.1" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
808
   <proof prover="4"><result status="valid" time="0.05" steps="42"/></proof>
809
   </goal>
810
   <goal name="VC main.90.2" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
811
   <proof prover="4"><result status="valid" time="0.02" steps="48"/></proof>
812
   </goal>
813
   <goal name="VC main.90.3" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
814
   <proof prover="4"><result status="valid" time="0.02" steps="44"/></proof>
815
   </goal>
816
   <goal name="VC main.90.4" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
817
   <proof prover="4"><result status="valid" time="0.11" steps="89"/></proof>
818
   </goal>
819
   <goal name="VC main.90.5" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
820
   <proof prover="4"><result status="valid" time="0.05" steps="118"/></proof>
821
   </goal>
822
   <goal name="VC main.90.6" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
823
   <proof prover="4"><result status="valid" time="0.13" steps="129"/></proof>
824
   </goal>
825
   <goal name="VC main.90.7" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
826
   <proof prover="4"><result status="valid" time="0.03" steps="52"/></proof>
827 828 829 830 831
   </goal>
  </transf>
  </goal>
  <goal name="VC main.91" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
832
   <goal name="VC main.91.0" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
833
   <proof prover="4"><result status="valid" time="0.39" steps="278"/></proof>
834
   </goal>
835
   <goal name="VC main.91.1" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
836
   <proof prover="4"><result status="valid" time="0.02" steps="41"/></proof>
837
   </goal>
838
   <goal name="VC main.91.2" expl="assertion" proved="true">
839
   <proof prover="4"><result status="valid" time="2.07" steps="1512"/></proof>
840
   </goal>
841
   <goal name="VC main.91.3" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
842
   <proof prover="4"><result status="valid" time="0.60" steps="632"/></proof>
843
   </goal>
844
   <goal name="VC main.91.4" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
845
   <proof prover="4"><result status="valid" time="0.02" steps="46"/></proof>
846
   </goal>
847
   <goal name="VC main.91.5" expl="assertion" proved="true">
848
   <proof prover="4"><result status="valid" time="0.02" steps="45"/></proof>
849
   </goal>
850
   <goal name="VC main.91.6" expl="assertion" proved="true">
851 852 853
   <proof prover="4"><result status="valid" time="0.16" steps="305"/></proof>
   </goal>
   <goal name="VC main.91.7" expl="assertion" proved="true">
854
   <proof prover="2" timelimit="20"><result status="valid" time="7.70" steps="4379"/></proof>
855 856 857 858 859
   <transf name="split_all_full" proved="true" >
    <goal name="VC main.91.7.0" expl="assertion" proved="true">
    <proof prover="2" timelimit="10" memlimit="4000"><result status="valid" time="5.30" steps="2977"/></proof>
    </goal>
   </transf>
860 861 862 863 864
   </goal>
  </transf>
  </goal>
  <goal name="VC main.92" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
865
   <goal name="VC main.92.0" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
866
   <proof prover="4"><result status="valid" time="0.23" steps="422"/></proof>
867
   </goal>
868
   <goal name="VC main.92.1" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
869
   <proof prover="4"><result status="valid" time="0.09" steps="223"/></proof>
870 871 872 873 874
   </goal>
  </transf>
  </goal>
  <goal name="VC main.93" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
875
   <goal name="VC main.93.0" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
876
   <proof prover="4"><result status="valid" time="0.16" steps="338"/></proof>
877
   </goal>
878
   <goal name="VC main.93.1" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
879
   <proof prover="4"><result status="valid" time="0.02" steps="42"/></proof>
880
   </goal>
881
   <goal name="VC main.93.2" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
882
   <proof prover="4"><result status="valid" time="0.98" steps="1473"/></proof>
883
   </goal>
884
   <goal name="VC main.93.3" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
885
   <proof prover="4"><result status="valid" time="0.04" steps="219"/></proof>
886
   </goal>
887
   <goal name="VC main.93.4" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
888
   <proof prover="4"><result status="valid" time="0.19" steps="199"/></proof>
889
   </goal>
890
   <goal name="VC main.93.5" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
891
   <proof prover="4"><result status="valid" time="0.03" steps="51"/></proof>
892 893 894 895 896
   </goal>
  </transf>
  </goal>
  <goal name="VC main.94" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
897
   <goal name="VC main.94.0" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
898
   <proof prover="4" memlimit="2000"><result status="valid" time="3.20" steps="3733"/></proof>
899
   </goal>
900
   <goal name="VC main.94.1" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
901
   <proof prover="4"><result status="valid" time="0.02" steps="42"/></proof>
902
   </goal>
903
   <goal name="VC main.94.2" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
904
   <proof prover="4"><result status="valid" time="2.64" steps="1095"/></proof>
905
   </goal>
906
   <goal name="VC main.94.3" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
907
   <proof prover="4"><result status="valid" time="0.03" steps="51"/></proof>
908
   </goal>
909
   <goal name="VC main.94.4" expl="assertion" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
910
   <proof prover="4"><result status="valid" time="0.11" steps="166"/></proof>
911 912 913 914
   </goal>
  </transf>
  </goal>
  <goal name="VC main.95" expl="safety" proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
915
  <proof prover="4" memlimit="2000"><result status="valid" time="0.22" steps="284"/></proof>
916 917 918 919 920
  </goal>
  <goal name="VC main.96" expl="loop invariant preservation" proved="true">
  <proof prover="3"><result status="valid" time="0.02"/></proof>
  </goal>
  <goal name="VC main.97" expl="loop invariant preservation" proved="true">