why3session.xml 140 KB
Newer Older
1
<?xml version="1.0" encoding="UTF-8"?>
MARCHE Claude's avatar
MARCHE Claude committed
2 3
<!DOCTYPE why3session PUBLIC "-//Why3//proof session v5//EN"
"http://why3.lri.fr/why3session.dtd">
Andrei Paskevich's avatar
Andrei Paskevich committed
4
<why3session shape_version="4">
MARCHE Claude's avatar
MARCHE Claude committed
5 6 7 8
 <prover id="0" name="CVC3" version="2.4.1" timelimit="10" memlimit="0"/>
 <prover id="1" name="Alt-Ergo" version="0.95.1" timelimit="10"
  memlimit="1000"/>
 <prover id="2" name="Coq" version="8.4pl3" timelimit="5" memlimit="4000"/>
9
 <file name="../vstte12_ring_buffer.mlw" verified="true"
Andrei Paskevich's avatar
Andrei Paskevich committed
10
  expanded="true">
MARCHE Claude's avatar
MARCHE Claude committed
11
  <theory name="RingBuffer" verified="true"
12
   expanded="true">
MARCHE Claude's avatar
MARCHE Claude committed
13
   <goal name="WP_parameter create" expl="VC for create"
14
    sum="93a4ac819186ebbe656859c60918ae12" proved="true"
Andrei Paskevich's avatar
Andrei Paskevich committed
15
    shape="ainfix =anthV2aNilaSomeagetaconstV1ainfix -ainfix +c0V2V0Iainfix &lt;=c0ainfix -ainfix +c0V2V0Aainfix =anthV2aNilaSomeagetaconstV1ainfix +c0V2Iainfix &lt;ainfix +c0V2V0Iainfix &lt;V2c0Aainfix &lt;=c0V2FAainfix =c0alengthaNilAainfix &lt;=c0V0Aainfix &lt;=c0c0Aainfix &lt;c0V0Aainfix &lt;=c0c0Iainfix &lt;=c0V0Aainfix &gt;=V0c0Iainfix &gt;V0c0F">
16
    <label name="expl:VC for create"/>
MARCHE Claude's avatar
MARCHE Claude committed
17
    <proof prover="1" memlimit="0">
18
     <result status="valid" time="0.01"/>
19 20
    </proof>
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
21
   <goal name="WP_parameter length" expl="VC for length"
22
    sum="940c41c737ceef5cd7b22ed36c678e9e" proved="true"
Andrei Paskevich's avatar
Andrei Paskevich committed
23
    shape="t">
24
    <label name="expl:VC for length"/>
MARCHE Claude's avatar
MARCHE Claude committed
25
    <proof prover="1" memlimit="0">
26
     <result status="valid" time="0.02"/>
27 28
    </proof>
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
29
   <goal name="WP_parameter clear" expl="VC for clear"
30
    sum="8b6c722faf188f5d449494513e197797" proved="true"
31
    shape="ainfix =V5aNilAainfix =V6c0Aainfix =anthV7V5aSomeagetV3ainfix -ainfix +V0V7V2Iainfix &lt;=c0ainfix -ainfix +V0V7V2Aainfix =anthV7V5aSomeagetV3ainfix +V0V7Iainfix &lt;ainfix +V0V7V2Iainfix &lt;V7V6Aainfix &lt;=c0V7FAainfix =V6alengthV5Aainfix &lt;=V6V2Aainfix &lt;=c0V6Aainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6c0FIainfix =V5aNilFIainfix &lt;=c0V2Aainfix =anthV8V4aSomeagetV3ainfix -ainfix +V0V8V2Iainfix &lt;=c0ainfix -ainfix +V0V8V2Aainfix =anthV8V4aSomeagetV3ainfix +V0V8Iainfix &lt;ainfix +V0V8V2Iainfix &lt;V8V1Aainfix &lt;=c0V8FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
32
    <label name="expl:VC for clear"/>
MARCHE Claude's avatar
MARCHE Claude committed
33
    <proof prover="1" memlimit="0">
34
     <result status="valid" time="0.01"/>
35 36
    </proof>
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
37
   <goal name="WP_parameter push" expl="VC for push"
38
    sum="c35b970af93a44dcb794f7d17fd71478" proved="true"
39
    shape="ainfix =V6ainfix ++V4aConsV5aNilAainfix =V9ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV10V6aSomeagetV8ainfix -ainfix +V0V10V2Iainfix &lt;=c0ainfix -ainfix +V0V10V2Aainfix =anthV10V6aSomeagetV8ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V9Aainfix &lt;=c0V10FAainfix =V9alengthV6Aainfix &lt;=V9V2Aainfix &lt;=c0V9Aainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix &lt;=c0V2FAainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix &lt;=c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
40 41 42
    <label name="expl:VC for push"/>
    <transf name="split_goal"
     proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
43
     <goal name="WP_parameter push.1" expl="1. index in array bounds"
44
      sum="440f851090c4fbfc13d98f2f433cbedf" proved="true"
MARCHE Claude's avatar
MARCHE Claude committed
45
      shape="index in array boundsainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix &lt;=c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix &lt;=c0V2Aainfix =anthV8V4aSomeagetV3ainfix -ainfix +V0V8V2Iainfix &lt;=c0ainfix -ainfix +V0V8V2Aainfix =anthV8V4aSomeagetV3ainfix +V0V8Iainfix &lt;ainfix +V0V8V2Iainfix &lt;V8V1Aainfix &lt;=c0V8FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
46
      <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
47
      <proof prover="1" memlimit="0">
48
       <result status="valid" time="0.01"/>
49 50
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
51
     <goal name="WP_parameter push.2" expl="2. type invariant"
52
      sum="89c350ba195099f6aba402b316b456d8" proved="true"
53
      shape="type invariantainfix =anthV10V6aSomeagetV8ainfix -ainfix +V0V10V2Iainfix &lt;=c0ainfix -ainfix +V0V10V2Aainfix =anthV10V6aSomeagetV8ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V9Aainfix &lt;=c0V10FAainfix =V9alengthV6Aainfix &lt;=V9V2Aainfix &lt;=c0V9Aainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix &lt;=c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix &lt;=c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
54 55 56
      <label name="expl:VC for push"/>
      <transf name="inline_goal"
       proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
57
       <goal name="WP_parameter push.2.1" expl="1. type invariant"
58
        sum="3970830123b856955a58c075fdaefe90" proved="true"
59
        shape="type invariantainfix =anthV10V6aSomeagetV8ainfix -ainfix +V0V10V2Iainfix =c0ainfix -ainfix +V0V10V2Oainfix &lt;c0ainfix -ainfix +V0V10V2Aainfix =anthV10V6aSomeagetV8ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V9Aainfix =c0V10Oainfix &lt;c0V10FAainfix =V9alengthV6Aainfix =V9V2Oainfix &lt;V9V2Aainfix =c0V9Oainfix &lt;c0V9Aainfix &lt;V0V2Aainfix =c0V0Oainfix &lt;c0V0Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix =c0V2Oainfix &lt;c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix =c0iV7ainfix -V7V2ainfix &gt;=V7V2Oainfix &lt;c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix =c0V2Oainfix &lt;c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix =c0ainfix -ainfix +V0V11V2Oainfix &lt;c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix =c0V11Oainfix &lt;c0V11FAainfix =V1alengthV4Aainfix =V1V2Oainfix &lt;V1V2Aainfix =c0V1Oainfix &lt;c0V1Aainfix &lt;V0V2Aainfix =c0V0Oainfix &lt;c0V0F">
60 61 62
        <label name="expl:VC for push"/>
        <transf name="split_goal"
         proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
63
         <goal name="WP_parameter push.2.1.1" expl="1."
64
          sum="4cc085cf2cfa09b66016f086ee87fe96" proved="true"
65
          shape="ainfix =c0V0Oainfix &lt;c0V0Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix =c0V2Oainfix &lt;c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix =c0iV7ainfix -V7V2ainfix &gt;=V7V2Oainfix &lt;c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix =c0V2Oainfix &lt;c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix =c0ainfix -ainfix +V0V10V2Oainfix &lt;c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix =c0V10Oainfix &lt;c0V10FAainfix =V1alengthV4Aainfix =V1V2Oainfix &lt;V1V2Aainfix =c0V1Oainfix &lt;c0V1Aainfix &lt;V0V2Aainfix =c0V0Oainfix &lt;c0V0F">
66
          <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
67
          <proof prover="1" timelimit="5">
68 69 70
           <result status="valid" time="0.02"/>
          </proof>
         </goal>
MARCHE Claude's avatar
MARCHE Claude committed
71
         <goal name="WP_parameter push.2.1.2" expl="2."
72
          sum="95fe528338cd640808009eaf1664048d" proved="true"
73
          shape="ainfix &lt;V0V2Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix =c0V2Oainfix &lt;c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix =c0iV7ainfix -V7V2ainfix &gt;=V7V2Oainfix &lt;c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix =c0V2Oainfix &lt;c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix =c0ainfix -ainfix +V0V10V2Oainfix &lt;c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix =c0V10Oainfix &lt;c0V10FAainfix =V1alengthV4Aainfix =V1V2Oainfix &lt;V1V2Aainfix =c0V1Oainfix &lt;c0V1Aainfix &lt;V0V2Aainfix =c0V0Oainfix &lt;c0V0F">
74
          <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
75
          <proof prover="1" timelimit="5">
76 77 78
           <result status="valid" time="0.02"/>
          </proof>
         </goal>
MARCHE Claude's avatar
MARCHE Claude committed
79
         <goal name="WP_parameter push.2.1.3" expl="3."
80
          sum="940f909d058cd1c8495604e159f9f4d2" proved="true"
81
          shape="ainfix =c0V9Oainfix &lt;c0V9Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix =c0V2Oainfix &lt;c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix =c0iV7ainfix -V7V2ainfix &gt;=V7V2Oainfix &lt;c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix =c0V2Oainfix &lt;c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix =c0ainfix -ainfix +V0V10V2Oainfix &lt;c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix =c0V10Oainfix &lt;c0V10FAainfix =V1alengthV4Aainfix =V1V2Oainfix &lt;V1V2Aainfix =c0V1Oainfix &lt;c0V1Aainfix &lt;V0V2Aainfix =c0V0Oainfix &lt;c0V0F">
82
          <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
83
          <proof prover="1" timelimit="5">
84 85 86
           <result status="valid" time="0.02"/>
          </proof>
         </goal>
MARCHE Claude's avatar
MARCHE Claude committed
87
         <goal name="WP_parameter push.2.1.4" expl="4."
88
          sum="b064014ec7910b6f74ed1eb4f8cebc8f" proved="true"
89
          shape="ainfix =V9V2Oainfix &lt;V9V2Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix =c0V2Oainfix &lt;c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix =c0iV7ainfix -V7V2ainfix &gt;=V7V2Oainfix &lt;c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix =c0V2Oainfix &lt;c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix =c0ainfix -ainfix +V0V10V2Oainfix &lt;c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix =c0V10Oainfix &lt;c0V10FAainfix =V1alengthV4Aainfix =V1V2Oainfix &lt;V1V2Aainfix =c0V1Oainfix &lt;c0V1Aainfix &lt;V0V2Aainfix =c0V0Oainfix &lt;c0V0F">
90
          <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
91
          <proof prover="1" memlimit="0">
92 93 94
           <result status="valid" time="0.01"/>
          </proof>
         </goal>
MARCHE Claude's avatar
MARCHE Claude committed
95
         <goal name="WP_parameter push.2.1.5" expl="5."
96
          sum="cf552d522706d92b4aab8a9d0f981721" proved="true"
97
          shape="ainfix =V9alengthV6Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix =c0V2Oainfix &lt;c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix =c0iV7ainfix -V7V2ainfix &gt;=V7V2Oainfix &lt;c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix =c0V2Oainfix &lt;c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix =c0ainfix -ainfix +V0V10V2Oainfix &lt;c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix =c0V10Oainfix &lt;c0V10FAainfix =V1alengthV4Aainfix =V1V2Oainfix &lt;V1V2Aainfix =c0V1Oainfix &lt;c0V1Aainfix &lt;V0V2Aainfix =c0V0Oainfix &lt;c0V0F">
98
          <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
99
          <proof prover="1" memlimit="0">
100 101 102
           <result status="valid" time="0.03"/>
          </proof>
         </goal>
MARCHE Claude's avatar
MARCHE Claude committed
103
         <goal name="WP_parameter push.2.1.6" expl="6."
104
          sum="09b0736cfcb250fe472eab51ae2c3ac3" proved="true"
105
          shape="ainfix =anthV10V6aSomeagetV8ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V9Aainfix =c0V10Oainfix &lt;c0V10FIainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix =c0V2Oainfix &lt;c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix =c0iV7ainfix -V7V2ainfix &gt;=V7V2Oainfix &lt;c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix =c0V2Oainfix &lt;c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix =c0ainfix -ainfix +V0V11V2Oainfix &lt;c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix =c0V11Oainfix &lt;c0V11FAainfix =V1alengthV4Aainfix =V1V2Oainfix &lt;V1V2Aainfix =c0V1Oainfix &lt;c0V1Aainfix &lt;V0V2Aainfix =c0V0Oainfix &lt;c0V0F">
106
          <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
107
          <proof prover="1" timelimit="5">
108 109 110
           <result status="valid" time="0.16"/>
          </proof>
         </goal>
MARCHE Claude's avatar
MARCHE Claude committed
111
         <goal name="WP_parameter push.2.1.7" expl="7."
112
          sum="c07e3d9cb5bbe5efd9acbd2ba19554fa" proved="true"
113
          shape="ainfix =anthV10V6aSomeagetV8ainfix -ainfix +V0V10V2Iainfix =c0ainfix -ainfix +V0V10V2Oainfix &lt;c0ainfix -ainfix +V0V10V2Iainfix &lt;V10V9Aainfix =c0V10Oainfix &lt;c0V10FIainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix =c0V2Oainfix &lt;c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix =c0iV7ainfix -V7V2ainfix &gt;=V7V2Oainfix &lt;c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix =c0V2Oainfix &lt;c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix =c0ainfix -ainfix +V0V11V2Oainfix &lt;c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix =c0V11Oainfix &lt;c0V11FAainfix =V1alengthV4Aainfix =V1V2Oainfix &lt;V1V2Aainfix =c0V1Oainfix &lt;c0V1Aainfix &lt;V0V2Aainfix =c0V0Oainfix &lt;c0V0F">
114
          <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
115
          <proof prover="1">
116 117 118 119
           <result status="valid" time="0.08"/>
          </proof>
         </goal>
        </transf>
120 121 122
       </goal>
      </transf>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
123
     <goal name="WP_parameter push.3" expl="3. type invariant"
124
      sum="7e87cf6752c4101f7a6955db2ccd2787" proved="true"
125
      shape="type invariantainfix &lt;=c0V2Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix &lt;=c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix &lt;=c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix &lt;=c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix &lt;=c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix &lt;=c0V10FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
126
      <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
127
      <proof prover="1" timelimit="5">
Andrei Paskevich's avatar
Andrei Paskevich committed
128 129 130
       <result status="valid" time="0.01"/>
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
131
     <goal name="WP_parameter push.4" expl="4. postcondition"
132
      sum="9eaeb941660d0a25cf5bbb6803a76e80" proved="true"
133
      shape="postconditionainfix =V9ainfix +V1c1Iainfix &lt;=c0V2Aainfix =anthV10V6aSomeagetV8ainfix -ainfix +V0V10V2Iainfix &lt;=c0ainfix -ainfix +V0V10V2Aainfix =anthV10V6aSomeagetV8ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V9Aainfix &lt;=c0V10FAainfix =V9alengthV6Aainfix &lt;=V9V2Aainfix &lt;=c0V9Aainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix &lt;=c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix &lt;=c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
134
      <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
135
      <proof prover="1" timelimit="30">
136 137 138
       <result status="valid" time="0.02"/>
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
139
     <goal name="WP_parameter push.5" expl="5. postcondition"
140
      sum="ebfbd53e7ca1d948cd1d8a44ec056cc7" proved="true"
141
      shape="postconditionainfix =V6ainfix ++V4aConsV5aNilIainfix &lt;=c0V2Aainfix =anthV10V6aSomeagetV8ainfix -ainfix +V0V10V2Iainfix &lt;=c0ainfix -ainfix +V0V10V2Aainfix =anthV10V6aSomeagetV8ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V9Aainfix &lt;=c0V10FAainfix =V9alengthV6Aainfix &lt;=V9V2Aainfix &lt;=c0V9Aainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V9ainfix +V1c1FIainfix =V8asetV3iV7ainfix -V7V2ainfix &gt;=V7V2V5Aainfix &lt;=c0V2FIainfix &lt;iV7ainfix -V7V2ainfix &gt;=V7V2V2Aainfix &lt;=c0iV7ainfix -V7V2ainfix &gt;=V7V2Lainfix +V0V1Iainfix =V6ainfix ++V4aConsV5aNilFIainfix &lt;V1V2Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
142
      <label name="expl:VC for push"/>
MARCHE Claude's avatar
MARCHE Claude committed
143
      <proof prover="1" timelimit="30">
144 145 146
       <result status="valid" time="0.01"/>
      </proof>
     </goal>
147 148
    </transf>
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
149
   <goal name="WP_parameter head" expl="VC for head"
150
    sum="6f484700ecf2485df1bf67cedeb20fe4" proved="true"
151
    shape="CfaNilainfix =agetV3V0V5aConsVwV4Aainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV6V4aSomeagetV3ainfix -ainfix +V0V6V2Iainfix &lt;=c0ainfix -ainfix +V0V6V2Aainfix =anthV6V4aSomeagetV3ainfix +V0V6Iainfix &lt;ainfix +V0V6V2Iainfix &lt;V6V1Aainfix &lt;=c0V6FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
152 153 154
    <label name="expl:VC for head"/>
    <transf name="split_goal"
     proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
155
     <goal name="WP_parameter head.1" expl="1. index in array bounds"
156
      sum="8015e77ddf56030d7f13ada39c8ac70c" proved="true"
MARCHE Claude's avatar
MARCHE Claude committed
157
      shape="index in array boundsainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV5V4aSomeagetV3ainfix -ainfix +V0V5V2Iainfix &lt;=c0ainfix -ainfix +V0V5V2Aainfix =anthV5V4aSomeagetV3ainfix +V0V5Iainfix &lt;ainfix +V0V5V2Iainfix &lt;V5V1Aainfix &lt;=c0V5FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
158
      <label name="expl:VC for head"/>
MARCHE Claude's avatar
MARCHE Claude committed
159
      <proof prover="1" memlimit="0">
160
       <result status="valid" time="0.02"/>
161 162
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
163
     <goal name="WP_parameter head.2" expl="2. postcondition"
164
      sum="ead5c4b3a4e466dc107b1173f9ba4d19" proved="true"
165
      shape="postconditionCfaNilainfix =agetV3V0V5aConsVwV4Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV6V4aSomeagetV3ainfix -ainfix +V0V6V2Iainfix &lt;=c0ainfix -ainfix +V0V6V2Aainfix =anthV6V4aSomeagetV3ainfix +V0V6Iainfix &lt;ainfix +V0V6V2Iainfix &lt;V6V1Aainfix &lt;=c0V6FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
166
      <label name="expl:VC for head"/>
MARCHE Claude's avatar
MARCHE Claude committed
167
      <proof prover="2" memlimit="1000"
168
       edited="vstte12_ring_buffer_2_RingBuffer_WP_parameter_head_1.v">
169
       <result status="valid" time="1.19"/>
170 171 172 173
      </proof>
     </goal>
    </transf>
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
174
   <goal name="WP_parameter pop" expl="VC for pop"
175
    sum="89e38fd8f7977b2dc214e40e67c22595" proved="true"
176
    shape="CfaNiliCfaNilainfix =V6V11Aainfix =V7V10aConsVVV4Aainfix =V8ainfix -V1c1Aainfix =anthV12V6aSomeagetV3ainfix -ainfix +V9V12V2Iainfix &lt;=c0ainfix -ainfix +V9V12V2Aainfix =anthV12V6aSomeagetV3ainfix +V9V12Iainfix &lt;ainfix +V9V12V2Iainfix &lt;V12V8Aainfix &lt;=c0V12FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V9V2Aainfix &lt;=c0V9CfaNilainfix =V6V15Aainfix =V7V14aConsVVV4Aainfix =V8ainfix -V1c1Aainfix =anthV16V6aSomeagetV3ainfix -ainfix +V13V16V2Iainfix &lt;=c0ainfix -ainfix +V13V16V2Aainfix =anthV16V6aSomeagetV3ainfix +V13V16Iainfix &lt;ainfix +V13V16V2Iainfix &lt;V16V8Aainfix &lt;=c0V16FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V13V2Aainfix &lt;=c0V13Iainfix =V13c0Fainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Aainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV17V4aSomeagetV3ainfix -ainfix +V0V17V2Iainfix &lt;=c0ainfix -ainfix +V0V17V2Aainfix =anthV17V4aSomeagetV3ainfix +V0V17Iainfix &lt;ainfix +V0V17V2Iainfix &lt;V17V1Aainfix &lt;=c0V17FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
177 178 179
    <label name="expl:VC for pop"/>
    <transf name="split_goal"
     proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
180
     <goal name="WP_parameter pop.1" expl="1. unreachable point"
181
      sum="5ba7f0c8ba3ce30768728eb9c8c7bf36" proved="true"
182
      shape="unreachable pointCfaNiltaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV6V4aSomeagetV3ainfix -ainfix +V0V6V2Iainfix &lt;=c0ainfix -ainfix +V0V6V2Aainfix =anthV6V4aSomeagetV3ainfix +V0V6Iainfix &lt;ainfix +V0V6V2Iainfix &lt;V6V1Aainfix &lt;=c0V6FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
183
      <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
184
      <proof prover="1" memlimit="0">
185 186 187
       <result status="valid" time="0.00"/>
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
188
     <goal name="WP_parameter pop.2" expl="2. index in array bounds"
189
      sum="3ee4ee0add6909ccf942398b52d063bf" proved="true"
MARCHE Claude's avatar
MARCHE Claude committed
190
      shape="index in array boundsCtaNilainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV7V4aSomeagetV3ainfix -ainfix +V0V7V2Iainfix &lt;=c0ainfix -ainfix +V0V7V2Aainfix =anthV7V4aSomeagetV3ainfix +V0V7Iainfix &lt;ainfix +V0V7V2Iainfix &lt;V7V1Aainfix &lt;=c0V7FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
191
      <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
192
      <proof prover="1" memlimit="0">
Andrei Paskevich's avatar
Andrei Paskevich committed
193
       <result status="valid" time="0.02"/>
194 195
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
196
     <goal name="WP_parameter pop.3" expl="3. type invariant"
197
      sum="c6f22dfa6c282c632fd69f846848bbcd" proved="true"
198
      shape="type invariantCtaNilainfix =anthV11V6aSomeagetV3ainfix -ainfix +V10V11V2Iainfix &lt;=c0ainfix -ainfix +V10V11V2Aainfix =anthV11V6aSomeagetV3ainfix +V10V11Iainfix &lt;ainfix +V10V11V2Iainfix &lt;V11V8Aainfix &lt;=c0V11FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V10V2Aainfix &lt;=c0V10Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV12V4aSomeagetV3ainfix -ainfix +V0V12V2Iainfix &lt;=c0ainfix -ainfix +V0V12V2Aainfix =anthV12V4aSomeagetV3ainfix +V0V12Iainfix &lt;ainfix +V0V12V2Iainfix &lt;V12V1Aainfix &lt;=c0V12FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
199 200 201
      <label name="expl:VC for pop"/>
      <transf name="split_goal"
       proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
202
       <goal name="WP_parameter pop.3.1" expl="1."
203
        sum="4b6f5dba9f6349f114dade667d0c92cf" proved="true"
204
        shape="CtaNilainfix &lt;=c0V10Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
205
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
206
        <proof prover="1" memlimit="0">
207 208 209
         <result status="valid" time="0.01"/>
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
210
       <goal name="WP_parameter pop.3.2" expl="2."
211
        sum="64d96a9e15c2c71f8ca37c2cf0e44420" proved="true"
212
        shape="CtaNilainfix &lt;V10V2Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
213
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
214
        <proof prover="1" timelimit="5">
215 216 217
         <result status="valid" time="0.02"/>
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
218
       <goal name="WP_parameter pop.3.3" expl="3."
219
        sum="ab8dc70d2be08faaa7cb62243aaf381a" proved="true"
220
        shape="CtaNilainfix &lt;=c0V8Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
221
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
222
        <proof prover="1" memlimit="0">
223 224 225
         <result status="valid" time="0.01"/>
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
226
       <goal name="WP_parameter pop.3.4" expl="4."
227
        sum="290f849deb6d48f49b5edf683628b002" proved="true"
228
        shape="CtaNilainfix &lt;=V8V2Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
229
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
230
        <proof prover="0" timelimit="5" memlimit="1000">
231 232
         <result status="valid" time="0.02"/>
        </proof>
MARCHE Claude's avatar
MARCHE Claude committed
233
        <proof prover="1" timelimit="5">
234 235 236
         <result status="valid" time="0.02"/>
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
237
       <goal name="WP_parameter pop.3.5" expl="5."
238
        sum="b225f3851949406c1f67a0d7e0f68106" proved="true"
239
        shape="CtaNilainfix =V8alengthV6Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
240
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
241
        <proof prover="1" memlimit="0">
242 243 244
         <result status="valid" time="0.01"/>
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
245
       <goal name="WP_parameter pop.3.6" expl="6."
246
        sum="f1986c6231daf5d524fa16fb80fd7dce" proved="true"
247
        shape="CtaNilainfix =anthV11V6aSomeagetV3ainfix +V10V11Iainfix &lt;ainfix +V10V11V2Iainfix &lt;V11V8Aainfix &lt;=c0V11FIainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV12V4aSomeagetV3ainfix -ainfix +V0V12V2Iainfix &lt;=c0ainfix -ainfix +V0V12V2Aainfix =anthV12V4aSomeagetV3ainfix +V0V12Iainfix &lt;ainfix +V0V12V2Iainfix &lt;V12V1Aainfix &lt;=c0V12FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
248
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
249
        <proof prover="0" timelimit="5" memlimit="1000">
250
         <result status="valid" time="0.06"/>
251 252
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
253
       <goal name="WP_parameter pop.3.7" expl="7."
254
        sum="ed3aa1329c23ce4ddafb833e12d7bf64" proved="true"
255
        shape="CtaNilainfix =anthV11V6aSomeagetV3ainfix -ainfix +V10V11V2Iainfix &lt;=c0ainfix -ainfix +V10V11V2Iainfix &lt;V11V8Aainfix &lt;=c0V11FIainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV12V4aSomeagetV3ainfix -ainfix +V0V12V2Iainfix &lt;=c0ainfix -ainfix +V0V12V2Aainfix =anthV12V4aSomeagetV3ainfix +V0V12Iainfix &lt;ainfix +V0V12V2Iainfix &lt;V12V1Aainfix &lt;=c0V12FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
256
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
257
        <proof prover="1" timelimit="5">
258 259 260 261 262
         <result status="valid" time="0.02"/>
        </proof>
       </goal>
      </transf>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
263
     <goal name="WP_parameter pop.4" expl="4. postcondition"
264
      sum="d96ca05cbb71a55e1a093d7aa14e8de6" proved="true"
265
      shape="postconditionCtaNilainfix =V8ainfix -V1c1Iainfix =anthV11V6aSomeagetV3ainfix -ainfix +V10V11V2Iainfix &lt;=c0ainfix -ainfix +V10V11V2Aainfix =anthV11V6aSomeagetV3ainfix +V10V11Iainfix &lt;ainfix +V10V11V2Iainfix &lt;V11V8Aainfix &lt;=c0V11FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V10V2Aainfix &lt;=c0V10Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV12V4aSomeagetV3ainfix -ainfix +V0V12V2Iainfix &lt;=c0ainfix -ainfix +V0V12V2Aainfix =anthV12V4aSomeagetV3ainfix +V0V12Iainfix &lt;ainfix +V0V12V2Iainfix &lt;V12V1Aainfix &lt;=c0V12FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
266
      <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
267
      <proof prover="1" timelimit="30">
268 269 270
       <result status="valid" time="0.01"/>
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
271
     <goal name="WP_parameter pop.5" expl="5. postcondition"
272
      sum="e8300fd3f4757eb62cf6c695572172b8" proved="true"
273
      shape="postconditionCtaNilCfaNilainfix =V6V12Aainfix =V7V11aConsVVV4Iainfix =anthV13V6aSomeagetV3ainfix -ainfix +V10V13V2Iainfix &lt;=c0ainfix -ainfix +V10V13V2Aainfix =anthV13V6aSomeagetV3ainfix +V10V13Iainfix &lt;ainfix +V10V13V2Iainfix &lt;V13V8Aainfix &lt;=c0V13FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V10V2Aainfix &lt;=c0V10Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV14V4aSomeagetV3ainfix -ainfix +V0V14V2Iainfix &lt;=c0ainfix -ainfix +V0V14V2Aainfix =anthV14V4aSomeagetV3ainfix +V0V14Iainfix &lt;ainfix +V0V14V2Iainfix &lt;V14V1Aainfix &lt;=c0V14FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
274 275 276
      <label name="expl:VC for pop"/>
      <transf name="split_goal_wp"
       proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
277
       <goal name="WP_parameter pop.5.1" expl="1. postcondition"
278
        sum="a3a1617df58a5297d5424605da2562bf" proved="true"
279
        shape="postconditionCtaNilCfaNiltaConsVVV4Iainfix =anthV13V6aSomeagetV3ainfix -ainfix +V10V13V2Iainfix &lt;=c0ainfix -ainfix +V10V13V2Aainfix =anthV13V6aSomeagetV3ainfix +V10V13Iainfix &lt;ainfix +V10V13V2Iainfix &lt;V13V8Aainfix &lt;=c0V13FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V10V2Aainfix &lt;=c0V10Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV14V4aSomeagetV3ainfix -ainfix +V0V14V2Iainfix &lt;=c0ainfix -ainfix +V0V14V2Aainfix =anthV14V4aSomeagetV3ainfix +V0V14Iainfix &lt;ainfix +V0V14V2Iainfix &lt;V14V1Aainfix &lt;=c0V14FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
280
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
281
        <proof prover="1" timelimit="5">
282 283 284
         <result status="valid" time="0.01"/>
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
285
       <goal name="WP_parameter pop.5.2" expl="2. postcondition"
286
        sum="1ff5ade35c32691010259c84223d2556" proved="true"
287
        shape="postconditionCtaNilCtaNilainfix =V7V11aConsVVV4Iainfix =anthV13V6aSomeagetV3ainfix -ainfix +V10V13V2Iainfix &lt;=c0ainfix -ainfix +V10V13V2Aainfix =anthV13V6aSomeagetV3ainfix +V10V13Iainfix &lt;ainfix +V10V13V2Iainfix &lt;V13V8Aainfix &lt;=c0V13FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V10V2Aainfix &lt;=c0V10Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV14V4aSomeagetV3ainfix -ainfix +V0V14V2Iainfix &lt;=c0ainfix -ainfix +V0V14V2Aainfix =anthV14V4aSomeagetV3ainfix +V0V14Iainfix &lt;ainfix +V0V14V2Iainfix &lt;V14V1Aainfix &lt;=c0V14FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
288
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
289
        <proof prover="2" memlimit="1000"
290
         edited="vstte12_ring_buffer_2_RingBuffer_WP_parameter_pop_4.v">
291
         <result status="valid" time="1.25"/>
292 293
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
294
       <goal name="WP_parameter pop.5.3" expl="3. postcondition"
295
        sum="ae03cac2ee69d30d036812748f01f39f" proved="true"
296
        shape="postconditionCtaNilCtaNilainfix =V6V12aConsVVV4Iainfix =anthV13V6aSomeagetV3ainfix -ainfix +V10V13V2Iainfix &lt;=c0ainfix -ainfix +V10V13V2Aainfix =anthV13V6aSomeagetV3ainfix +V10V13Iainfix &lt;ainfix +V10V13V2Iainfix &lt;V13V8Aainfix &lt;=c0V13FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V10V2Aainfix &lt;=c0V10Iainfix =V10c0FIainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV14V4aSomeagetV3ainfix -ainfix +V0V14V2Iainfix &lt;=c0ainfix -ainfix +V0V14V2Aainfix =anthV14V4aSomeagetV3ainfix +V0V14Iainfix &lt;ainfix +V0V14V2Iainfix &lt;V14V1Aainfix &lt;=c0V14FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
297
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
298
        <proof prover="1" timelimit="5">
299 300 301 302 303
         <result status="valid" time="0.00"/>
        </proof>
       </goal>
      </transf>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
304
     <goal name="WP_parameter pop.6" expl="6. type invariant"
305
      sum="0632cb5bece2309770af37c7c7af2540" proved="true"
306
      shape="type invariantCtaNilainfix =anthV10V6aSomeagetV3ainfix -ainfix +V9V10V2Iainfix &lt;=c0ainfix -ainfix +V9V10V2Aainfix =anthV10V6aSomeagetV3ainfix +V9V10Iainfix &lt;ainfix +V9V10V2Iainfix &lt;V10V8Aainfix &lt;=c0V10FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V9V2Aainfix &lt;=c0V9INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
307 308 309
      <label name="expl:VC for pop"/>
      <transf name="split_goal"
       proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
310
       <goal name="WP_parameter pop.6.1" expl="1."
311
        sum="d28d0eafba790e97e6ddc7eda041db0c" proved="true"
312
        shape="CtaNilainfix &lt;=c0V9INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix &lt;=c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix &lt;=c0V10FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
313
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
314
        <proof prover="1" memlimit="0">
315
         <result status="valid" time="0.01"/>
316 317
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
318
       <goal name="WP_parameter pop.6.2" expl="2."
319
        sum="c832d40cb13d561fe9952c8d8aab7fbf" proved="true"
320
        shape="CtaNilainfix &lt;V9V2INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix &lt;=c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix &lt;=c0V10FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
321
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
322
        <proof prover="1" timelimit="5">
323
         <result status="valid" time="0.01"/>
324 325
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
326
       <goal name="WP_parameter pop.6.3" expl="3."
327
        sum="2d4a0bb6a533c57348ca2d20671f4999" proved="true"
328
        shape="CtaNilainfix &lt;=c0V8INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix &lt;=c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix &lt;=c0V10FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
329
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
330
        <proof prover="1" memlimit="0">
331
         <result status="valid" time="0.02"/>
332 333
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
334
       <goal name="WP_parameter pop.6.4" expl="4."
335
        sum="77d130e0bb1176be46866a870d8e64c5" proved="true"
336
        shape="CtaNilainfix &lt;=V8V2INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix &lt;=c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix &lt;=c0V10FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
337
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
338
        <proof prover="0" timelimit="5" memlimit="1000">
339
         <result status="valid" time="0.02"/>
340
        </proof>
MARCHE Claude's avatar
MARCHE Claude committed
341 342 343
        <proof prover="1" timelimit="5">
         <result status="valid" time="0.01"/>
        </proof>
344
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
345
       <goal name="WP_parameter pop.6.5" expl="5."
346
        sum="34d4dc9444a5e3d9518ce54af73f86a3" proved="true"
347
        shape="CtaNilainfix =V8alengthV6INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV10V4aSomeagetV3ainfix -ainfix +V0V10V2Iainfix &lt;=c0ainfix -ainfix +V0V10V2Aainfix =anthV10V4aSomeagetV3ainfix +V0V10Iainfix &lt;ainfix +V0V10V2Iainfix &lt;V10V1Aainfix &lt;=c0V10FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
348
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
349
        <proof prover="1" memlimit="0">
350 351 352
         <result status="valid" time="0.01"/>
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
353
       <goal name="WP_parameter pop.6.6" expl="6."
354
        sum="227ce013f8c7fad380732f8154ceb33b" proved="true"
355
        shape="CtaNilainfix =anthV10V6aSomeagetV3ainfix +V9V10Iainfix &lt;ainfix +V9V10V2Iainfix &lt;V10V8Aainfix &lt;=c0V10FINainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
356
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
357
        <proof prover="0" timelimit="5" memlimit="1000">
358
         <result status="valid" time="0.09"/>
359 360
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
361
       <goal name="WP_parameter pop.6.7" expl="7."
362
        sum="6721d851a88e36a73ff7ff7f01599590" proved="true"
363
        shape="CtaNilainfix =anthV10V6aSomeagetV3ainfix -ainfix +V9V10V2Iainfix &lt;=c0ainfix -ainfix +V9V10V2Iainfix &lt;V10V8Aainfix &lt;=c0V10FINainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
364
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
365
        <proof prover="2" timelimit="60"
366
         edited="vstte12_ring_buffer_RingBuffer_WP_parameter_pop_1.v">
MARCHE Claude's avatar
MARCHE Claude committed
367
         <result status="valid" time="1.36"/>
368 369 370 371
        </proof>
       </goal>
      </transf>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
372
     <goal name="WP_parameter pop.7" expl="7. postcondition"
373
      sum="973303f7b6bbdf5f2bb9da666f685efc" proved="true"
374
      shape="postconditionCtaNilainfix =V8ainfix -V1c1Iainfix =anthV10V6aSomeagetV3ainfix -ainfix +V9V10V2Iainfix &lt;=c0ainfix -ainfix +V9V10V2Aainfix =anthV10V6aSomeagetV3ainfix +V9V10Iainfix &lt;ainfix +V9V10V2Iainfix &lt;V10V8Aainfix &lt;=c0V10FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V9V2Aainfix &lt;=c0V9INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV11V4aSomeagetV3ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V4aSomeagetV3ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V1Aainfix &lt;=c0V11FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
375
      <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
376
      <proof prover="1" timelimit="30">
377 378 379
       <result status="valid" time="0.01"/>
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
380
     <goal name="WP_parameter pop.8" expl="8. postcondition"
381
      sum="13d25c78b2ed87748c7bf64a3bba8e55" proved="true"
382
      shape="postconditionCtaNilCfaNilainfix =V6V11Aainfix =V7V10aConsVVV4Iainfix =anthV12V6aSomeagetV3ainfix -ainfix +V9V12V2Iainfix &lt;=c0ainfix -ainfix +V9V12V2Aainfix =anthV12V6aSomeagetV3ainfix +V9V12Iainfix &lt;ainfix +V9V12V2Iainfix &lt;V12V8Aainfix &lt;=c0V12FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V9V2Aainfix &lt;=c0V9INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV13V4aSomeagetV3ainfix -ainfix +V0V13V2Iainfix &lt;=c0ainfix -ainfix +V0V13V2Aainfix =anthV13V4aSomeagetV3ainfix +V0V13Iainfix &lt;ainfix +V0V13V2Iainfix &lt;V13V1Aainfix &lt;=c0V13FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
383 384 385
      <label name="expl:VC for pop"/>
      <transf name="split_goal_wp"
       proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
386
       <goal name="WP_parameter pop.8.1" expl="1. postcondition"
387
        sum="f06a358e173bb624ffccf417e039f06e" proved="true"
388
        shape="postconditionCtaNilCfaNiltaConsVVV4Iainfix =anthV12V6aSomeagetV3ainfix -ainfix +V9V12V2Iainfix &lt;=c0ainfix -ainfix +V9V12V2Aainfix =anthV12V6aSomeagetV3ainfix +V9V12Iainfix &lt;ainfix +V9V12V2Iainfix &lt;V12V8Aainfix &lt;=c0V12FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V9V2Aainfix &lt;=c0V9INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV13V4aSomeagetV3ainfix -ainfix +V0V13V2Iainfix &lt;=c0ainfix -ainfix +V0V13V2Aainfix =anthV13V4aSomeagetV3ainfix +V0V13Iainfix &lt;ainfix +V0V13V2Iainfix &lt;V13V1Aainfix &lt;=c0V13FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
389
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
390
        <proof prover="1" timelimit="5">
391
         <result status="valid" time="0.01"/>
392 393
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
394
       <goal name="WP_parameter pop.8.2" expl="2. postcondition"
395
        sum="34b4ea13d48bac17bc067dc93eb46b86" proved="true"
396
        shape="postconditionCtaNilCtaNilainfix =V7V10aConsVVV4Iainfix =anthV12V6aSomeagetV3ainfix -ainfix +V9V12V2Iainfix &lt;=c0ainfix -ainfix +V9V12V2Aainfix =anthV12V6aSomeagetV3ainfix +V9V12Iainfix &lt;ainfix +V9V12V2Iainfix &lt;V12V8Aainfix &lt;=c0V12FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V9V2Aainfix &lt;=c0V9INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV13V4aSomeagetV3ainfix -ainfix +V0V13V2Iainfix &lt;=c0ainfix -ainfix +V0V13V2Aainfix =anthV13V4aSomeagetV3ainfix +V0V13Iainfix &lt;ainfix +V0V13V2Iainfix &lt;V13V1Aainfix &lt;=c0V13FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
397
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
398
        <proof prover="2" memlimit="1000"
399 400
         edited="vstte12_ring_buffer_2_RingBuffer_WP_parameter_pop_3.v">
         <result status="valid" time="1.19"/>
401 402
        </proof>
       </goal>
MARCHE Claude's avatar
MARCHE Claude committed
403
       <goal name="WP_parameter pop.8.3" expl="3. postcondition"
404
        sum="193d2ec2fafe040b79a0c1b8698680c5" proved="true"
405
        shape="postconditionCtaNilCtaNilainfix =V6V11aConsVVV4Iainfix =anthV12V6aSomeagetV3ainfix -ainfix +V9V12V2Iainfix &lt;=c0ainfix -ainfix +V9V12V2Aainfix =anthV12V6aSomeagetV3ainfix +V9V12Iainfix &lt;ainfix +V9V12V2Iainfix &lt;V12V8Aainfix &lt;=c0V12FAainfix =V8alengthV6Aainfix &lt;=V8V2Aainfix &lt;=c0V8Aainfix &lt;V9V2Aainfix &lt;=c0V9INainfix =V9V2Iainfix =V9ainfix +V0c1FIainfix =V8ainfix -V1c1FLagetV3V0Iainfix &lt;V0V2Aainfix &lt;=c0V0Iainfix =V6V5FaConswVV4Iainfix &gt;V1c0Aainfix &lt;=c0V2Aainfix =anthV13V4aSomeagetV3ainfix -ainfix +V0V13V2Iainfix &lt;=c0ainfix -ainfix +V0V13V2Aainfix =anthV13V4aSomeagetV3ainfix +V0V13Iainfix &lt;ainfix +V0V13V2Iainfix &lt;V13V1Aainfix &lt;=c0V13FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0F">
406
        <label name="expl:VC for pop"/>
MARCHE Claude's avatar
MARCHE Claude committed
407
        <proof prover="1" timelimit="5">
408
         <result status="valid" time="0.02"/>
409 410 411 412 413 414 415
        </proof>
       </goal>
      </transf>
     </goal>
    </transf>
   </goal>
  </theory>
MARCHE Claude's avatar
MARCHE Claude committed
416
  <theory name="Harness"
417
   verified="true">
MARCHE Claude's avatar
MARCHE Claude committed
418
   <goal name="WP_parameter harness" expl="VC for harness"
419
    sum="6dec2af1d118fe165c931503260fa6ca" proved="true"
420
    shape="ainfix =V25c3ICfaNilainfix =V22V27Aainfix =V25V26aConsVVV18Aainfix =V23ainfix -V19c1Aainfix =anthV28V22aSomeagetV12ainfix -ainfix +V24V28V2Iainfix &lt;=c0ainfix -ainfix +V24V28V2Aainfix =anthV28V22aSomeagetV12ainfix +V24V28Iainfix &lt;ainfix +V24V28V2Iainfix &lt;V28V23Aainfix &lt;=c0V28FAainfix =V23alengthV22Aainfix &lt;=V23V2Aainfix &lt;=c0V23Aainfix &lt;V24V2Aainfix &lt;=c0V24FFAainfix &gt;V19c0Aainfix =V21c2ICfaNilainfix =V18V30Aainfix =V21V29aConsVVV14Aainfix =V19ainfix -V15c1Aainfix =anthV31V18aSomeagetV12ainfix -ainfix +V20V31V2Iainfix &lt;=c0ainfix -ainfix +V20V31V2Aainfix =anthV31V18aSomeagetV12ainfix +V20V31Iainfix &lt;ainfix +V20V31V2Iainfix &lt;V31V19Aainfix &lt;=c0V31FAainfix =V19alengthV18Aainfix &lt;=V19V2Aainfix &lt;=c0V19Aainfix &lt;V20V2Aainfix &lt;=c0V20FFAainfix &gt;V15c0Aainfix =V17c1ICfaNilainfix =V14V33Aainfix =V17V32aConsVVV11Aainfix =V15ainfix -V13c1Aainfix =anthV34V14aSomeagetV12ainfix -ainfix +V16V34V2Iainfix &lt;=c0ainfix -ainfix +V16V34V2Aainfix =anthV34V14aSomeagetV12ainfix +V16V34Iainfix &lt;ainfix +V16V34V2Iainfix &lt;V34V15Aainfix &lt;=c0V34FAainfix =V15alengthV14Aainfix &lt;=V15V2Aainfix &lt;=c0V15Aainfix &lt;V16V2Aainfix &lt;=c0V16FFAainfix &gt;V13c0Iainfix =V11ainfix ++V8aConsc3aNilAainfix =V13ainfix +V10c1Aainfix &lt;=c0V2Aainfix =anthV35V11aSomeagetV12ainfix -ainfix +V0V35V2Iainfix &lt;=c0ainfix -ainfix +V0V35V2Aainfix =anthV35V11aSomeagetV12ainfix +V0V35Iainfix &lt;ainfix +V0V35V2Iainfix &lt;V35V13Aainfix &lt;=c0V35FAainfix =V13alengthV11Aainfix &lt;=V13V2Aainfix &lt;=c0V13Aainfix &lt;V0V2Aainfix &lt;=c0V0FAainfix &lt;V10V2Iainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV36V8aSomeagetV9ainfix -ainfix +V0V36V2Iainfix &lt;=c0ainfix -ainfix +V0V36V2Aainfix =anthV36V8aSomeagetV9ainfix +V0V36Iainfix &lt;ainfix +V0V36V2Iainfix &lt;V36V10Aainfix &lt;=c0V36FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FAainfix &lt;V7V2Iainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV37V5aSomeagetV6ainfix -ainfix +V0V37V2Iainfix &lt;=c0ainfix -ainfix +V0V37V2Aainfix =anthV37V5aSomeagetV6ainfix +V0V37Iainfix &lt;ainfix +V0V37V2Iainfix &lt;V37V7Aainfix &lt;=c0V37FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FAainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c10Aainfix &lt;=c0V2Aainfix =anthV38V4aSomeagetV3ainfix -ainfix +V0V38V2Iainfix &lt;=c0ainfix -ainfix +V0V38V2Aainfix =anthV38V4aSomeagetV3ainfix +V0V38Iainfix &lt;ainfix +V0V38V2Iainfix &lt;V38V1Aainfix &lt;=c0V38FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FAainfix &gt;c10c0">
421 422 423
    <label name="expl:VC for harness"/>
    <transf name="split_goal"
     proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
424
     <goal name="WP_parameter harness.1" expl="1. precondition"
425
      sum="d95b712da10ce29ad1b7591df70fb45a" proved="true"
426
      shape="preconditionainfix &gt;c10c0">
427
      <label name="expl:VC for harness"/>
MARCHE Claude's avatar
MARCHE Claude committed
428
      <proof prover="1" memlimit="0">
429
       <result status="valid" time="0.01"/>
430 431
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
432
     <goal name="WP_parameter harness.2" expl="2. precondition"
433
      sum="9cc0375df19d7f74ce61369d86968cbb" proved="true"
434
      shape="preconditionainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c10Aainfix &lt;=c0V2Aainfix =anthV5V4aSomeagetV3ainfix -ainfix +V0V5V2Iainfix &lt;=c0ainfix -ainfix +V0V5V2Aainfix =anthV5V4aSomeagetV3ainfix +V0V5Iainfix &lt;ainfix +V0V5V2Iainfix &lt;V5V1Aainfix &lt;=c0V5FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c10c0">
435
      <label name="expl:VC for harness"/>
MARCHE Claude's avatar
MARCHE Claude committed
436
      <proof prover="1" memlimit="0">
437
       <result status="valid" time="0.01"/>
438 439
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
440
     <goal name="WP_parameter harness.3" expl="3. precondition"
441
      sum="d5cfc313e4955ad8fe3b9a3468a84ab8" proved="true"
442
      shape="preconditionainfix &lt;V7V2Iainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV8V5aSomeagetV6ainfix -ainfix +V0V8V2Iainfix &lt;=c0ainfix -ainfix +V0V8V2Aainfix =anthV8V5aSomeagetV6ainfix +V0V8Iainfix &lt;ainfix +V0V8V2Iainfix &lt;V8V7Aainfix &lt;=c0V8FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c10Aainfix &lt;=c0V2Aainfix =anthV9V4aSomeagetV3ainfix -ainfix +V0V9V2Iainfix &lt;=c0ainfix -ainfix +V0V9V2Aainfix =anthV9V4aSomeagetV3ainfix +V0V9Iainfix &lt;ainfix +V0V9V2Iainfix &lt;V9V1Aainfix &lt;=c0V9FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c10c0">
443
      <label name="expl:VC for harness"/>
MARCHE Claude's avatar
MARCHE Claude committed
444
      <proof prover="0">
445
       <result status="valid" time="0.02"/>
446
      </proof>
MARCHE Claude's avatar
MARCHE Claude committed
447 448 449
      <proof prover="1" memlimit="0">
       <result status="valid" time="0.01"/>
      </proof>
450
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
451
     <goal name="WP_parameter harness.4" expl="4. precondition"
452
      sum="a7e89ab7614f9c19418b2bab62d3748a" proved="true"
453
      shape="preconditionainfix &lt;V10V2Iainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV11V8aSomeagetV9ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V8aSomeagetV9ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V10Aainfix &lt;=c0V11FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V7V2Iainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV12V5aSomeagetV6ainfix -ainfix +V0V12V2Iainfix &lt;=c0ainfix -ainfix +V0V12V2Aainfix =anthV12V5aSomeagetV6ainfix +V0V12Iainfix &lt;ainfix +V0V12V2Iainfix &lt;V12V7Aainfix &lt;=c0V12FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c10Aainfix &lt;=c0V2Aainfix =anthV13V4aSomeagetV3ainfix -ainfix +V0V13V2Iainfix &lt;=c0ainfix -ainfix +V0V13V2Aainfix =anthV13V4aSomeagetV3ainfix +V0V13Iainfix &lt;ainfix +V0V13V2Iainfix &lt;V13V1Aainfix &lt;=c0V13FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c10c0">
454
      <label name="expl:VC for harness"/>
MARCHE Claude's avatar
MARCHE Claude committed
455
      <proof prover="1" memlimit="0">
456
       <result status="valid" time="0.02"/>
457 458
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
459
     <goal name="WP_parameter harness.5" expl="5. precondition"
460
      sum="a9c8f91bbb5af2c3b5d1edfaea6d3c46" proved="true"
461
      shape="preconditionainfix &gt;V13c0Iainfix =V11ainfix ++V8aConsc3aNilAainfix =V13ainfix +V10c1Aainfix &lt;=c0V2Aainfix =anthV14V11aSomeagetV12ainfix -ainfix +V0V14V2Iainfix &lt;=c0ainfix -ainfix +V0V14V2Aainfix =anthV14V11aSomeagetV12ainfix +V0V14Iainfix &lt;ainfix +V0V14V2Iainfix &lt;V14V13Aainfix &lt;=c0V14FAainfix =V13alengthV11Aainfix &lt;=V13V2Aainfix &lt;=c0V13Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V10V2Iainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV15V8aSomeagetV9ainfix -ainfix +V0V15V2Iainfix &lt;=c0ainfix -ainfix +V0V15V2Aainfix =anthV15V8aSomeagetV9ainfix +V0V15Iainfix &lt;ainfix +V0V15V2Iainfix &lt;V15V10Aainfix &lt;=c0V15FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V7V2Iainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV16V5aSomeagetV6ainfix -ainfix +V0V16V2Iainfix &lt;=c0ainfix -ainfix +V0V16V2Aainfix =anthV16V5aSomeagetV6ainfix +V0V16Iainfix &lt;ainfix +V0V16V2Iainfix &lt;V16V7Aainfix &lt;=c0V16FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c10Aainfix &lt;=c0V2Aainfix =anthV17V4aSomeagetV3ainfix -ainfix +V0V17V2Iainfix &lt;=c0ainfix -ainfix +V0V17V2Aainfix =anthV17V4aSomeagetV3ainfix +V0V17Iainfix &lt;ainfix +V0V17V2Iainfix &lt;V17V1Aainfix &lt;=c0V17FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c10c0">
462
      <label name="expl:VC for harness"/>
MARCHE Claude's avatar
MARCHE Claude committed
463
      <proof prover="1" timelimit="15" memlimit="0">
464
       <result status="valid" time="0.02"/>
465 466
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
467
     <goal name="WP_parameter harness.6" expl="6. assertion"
468
      sum="568938fc763146f35adf1f62d02a6bc6" proved="true"
469
      shape="assertionainfix =V17c1ICfaNilainfix =V14V19Aainfix =V17V18aConsVVV11Aainfix =V15ainfix -V13c1Aainfix =anthV20V14aSomeagetV12ainfix -ainfix +V16V20V2Iainfix &lt;=c0ainfix -ainfix +V16V20V2Aainfix =anthV20V14aSomeagetV12ainfix +V16V20Iainfix &lt;ainfix +V16V20V2Iainfix &lt;V20V15Aainfix &lt;=c0V20FAainfix =V15alengthV14Aainfix &lt;=V15V2Aainfix &lt;=c0V15Aainfix &lt;V16V2Aainfix &lt;=c0V16FFIainfix &gt;V13c0Iainfix =V11ainfix ++V8aConsc3aNilAainfix =V13ainfix +V10c1Aainfix &lt;=c0V2Aainfix =anthV21V11aSomeagetV12ainfix -ainfix +V0V21V2Iainfix &lt;=c0ainfix -ainfix +V0V21V2Aainfix =anthV21V11aSomeagetV12ainfix +V0V21Iainfix &lt;ainfix +V0V21V2Iainfix &lt;V21V13Aainfix &lt;=c0V21FAainfix =V13alengthV11Aainfix &lt;=V13V2Aainfix &lt;=c0V13Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V10V2Iainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV22V8aSomeagetV9ainfix -ainfix +V0V22V2Iainfix &lt;=c0ainfix -ainfix +V0V22V2Aainfix =anthV22V8aSomeagetV9ainfix +V0V22Iainfix &lt;ainfix +V0V22V2Iainfix &lt;V22V10Aainfix &lt;=c0V22FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V7V2Iainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV23V5aSomeagetV6ainfix -ainfix +V0V23V2Iainfix &lt;=c0ainfix -ainfix +V0V23V2Aainfix =anthV23V5aSomeagetV6ainfix +V0V23Iainfix &lt;ainfix +V0V23V2Iainfix &lt;V23V7Aainfix &lt;=c0V23FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c10Aainfix &lt;=c0V2Aainfix =anthV24V4aSomeagetV3ainfix -ainfix +V0V24V2Iainfix &lt;=c0ainfix -ainfix +V0V24V2Aainfix =anthV24V4aSomeagetV3ainfix +V0V24Iainfix &lt;ainfix +V0V24V2Iainfix &lt;V24V1Aainfix &lt;=c0V24FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c10c0">
470
      <label name="expl:VC for harness"/>
MARCHE Claude's avatar
MARCHE Claude committed
471
      <proof prover="1" memlimit="0">
MARCHE Claude's avatar
MARCHE Claude committed
472
       <result status="valid" time="0.89"/>
473 474
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
475
     <goal name="WP_parameter harness.7" expl="7. precondition"
476
      sum="bbf184fe374f81bf0dd011ad1665932a" proved="true"
477
      shape="preconditionainfix &gt;V15c0Iainfix =V17c1ICfaNilainfix =V14V19Aainfix =V17V18aConsVVV11Aainfix =V15ainfix -V13c1Aainfix =anthV20V14aSomeagetV12ainfix -ainfix +V16V20V2Iainfix &lt;=c0ainfix -ainfix +V16V20V2Aainfix =anthV20V14aSomeagetV12ainfix +V16V20Iainfix &lt;ainfix +V16V20V2Iainfix &lt;V20V15Aainfix &lt;=c0V20FAainfix =V15alengthV14Aainfix &lt;=V15V2Aainfix &lt;=c0V15Aainfix &lt;V16V2Aainfix &lt;=c0V16FFIainfix &gt;V13c0Iainfix =V11ainfix ++V8aConsc3aNilAainfix =V13ainfix +V10c1Aainfix &lt;=c0V2Aainfix =anthV21V11aSomeagetV12ainfix -ainfix +V0V21V2Iainfix &lt;=c0ainfix -ainfix +V0V21V2Aainfix =anthV21V11aSomeagetV12ainfix +V0V21Iainfix &lt;ainfix +V0V21V2Iainfix &lt;V21V13Aainfix &lt;=c0V21FAainfix =V13alengthV11Aainfix &lt;=V13V2Aainfix &lt;=c0V13Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V10V2Iainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV22V8aSomeagetV9ainfix -ainfix +V0V22V2Iainfix &lt;=c0ainfix -ainfix +V0V22V2Aainfix =anthV22V8aSomeagetV9ainfix +V0V22Iainfix &lt;ainfix +V0V22V2Iainfix &lt;V22V10Aainfix &lt;=c0V22FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V7V2Iainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV23V5aSomeagetV6ainfix -ainfix +V0V23V2Iainfix &lt;=c0ainfix -ainfix +V0V23V2Aainfix =anthV23V5aSomeagetV6ainfix +V0V23Iainfix &lt;ainfix +V0V23V2Iainfix &lt;V23V7Aainfix &lt;=c0V23FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c10Aainfix &lt;=c0V2Aainfix =anthV24V4aSomeagetV3ainfix -ainfix +V0V24V2Iainfix &lt;=c0ainfix -ainfix +V0V24V2Aainfix =anthV24V4aSomeagetV3ainfix +V0V24Iainfix &lt;ainfix +V0V24V2Iainfix &lt;V24V1Aainfix &lt;=c0V24FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c10c0">
478
      <label name="expl:VC for harness"/>
MARCHE Claude's avatar
MARCHE Claude committed
479
      <proof prover="1" memlimit="0">
480
       <result status="valid" time="0.03"/>
481 482
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
483
     <goal name="WP_parameter harness.8" expl="8. assertion"
484
      sum="66ba17701fc8fdc20dbaf8d450d22d7a" proved="true"
485
      shape="assertionainfix =V21c2ICfaNilainfix =V18V23Aainfix =V21V22aConsVVV14Aainfix =V19ainfix -V15c1Aainfix =anthV24V18aSomeagetV12ainfix -ainfix +V20V24V2Iainfix &lt;=c0ainfix -ainfix +V20V24V2Aainfix =anthV24V18aSomeagetV12ainfix +V20V24Iainfix &lt;ainfix +V20V24V2Iainfix &lt;V24V19Aainfix &lt;=c0V24FAainfix =V19alengthV18Aainfix &lt;=V19V2Aainfix &lt;=c0V19Aainfix &lt;V20V2Aainfix &lt;=c0V20FFIainfix &gt;V15c0Iainfix =V17c1ICfaNilainfix =V14V26Aainfix =V17V25aConsVVV11Aainfix =V15ainfix -V13c1Aainfix =anthV27V14aSomeagetV12ainfix -ainfix +V16V27V2Iainfix &lt;=c0ainfix -ainfix +V16V27V2Aainfix =anthV27V14aSomeagetV12ainfix +V16V27Iainfix &lt;ainfix +V16V27V2Iainfix &lt;V27V15Aainfix &lt;=c0V27FAainfix =V15alengthV14Aainfix &lt;=V15V2Aainfix &lt;=c0V15Aainfix &lt;V16V2Aainfix &lt;=c0V16FFIainfix &gt;V13c0Iainfix =V11ainfix ++V8aConsc3aNilAainfix =V13ainfix +V10c1Aainfix &lt;=c0V2Aainfix =anthV28V11aSomeagetV12ainfix -ainfix +V0V28V2Iainfix &lt;=c0ainfix -ainfix +V0V28V2Aainfix =anthV28V11aSomeagetV12ainfix +V0V28Iainfix &lt;ainfix +V0V28V2Iainfix &lt;V28V13Aainfix &lt;=c0V28FAainfix =V13alengthV11Aainfix &lt;=V13V2Aainfix &lt;=c0V13Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V10V2Iainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV29V8aSomeagetV9ainfix -ainfix +V0V29V2Iainfix &lt;=c0ainfix -ainfix +V0V29V2Aainfix =anthV29V8aSomeagetV9ainfix +V0V29Iainfix &lt;ainfix +V0V29V2Iainfix &lt;V29V10Aainfix &lt;=c0V29FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V7V2Iainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV30V5aSomeagetV6ainfix -ainfix +V0V30V2Iainfix &lt;=c0ainfix -ainfix +V0V30V2Aainfix =anthV30V5aSomeagetV6ainfix +V0V30Iainfix &lt;ainfix +V0V30V2Iainfix &lt;V30V7Aainfix &lt;=c0V30FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c10Aainfix &lt;=c0V2Aainfix =anthV31V4aSomeagetV3ainfix -ainfix +V0V31V2Iainfix &lt;=c0ainfix -ainfix +V0V31V2Aainfix =anthV31V4aSomeagetV3ainfix +V0V31Iainfix &lt;ainfix +V0V31V2Iainfix &lt;V31V1Aainfix &lt;=c0V31FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c10c0">
486
      <label name="expl:VC for harness"/>
MARCHE Claude's avatar
MARCHE Claude committed
487
      <proof prover="1" timelimit="13" memlimit="0">
MARCHE Claude's avatar
MARCHE Claude committed
488
       <result status="valid" time="1.00"/>
489 490
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
491
     <goal name="WP_parameter harness.9" expl="9. precondition"
492
      sum="716e504b7c984a1ea8aa1052d658006f" proved="true"
493
      shape="preconditionainfix &gt;V19c0Iainfix =V21c2ICfaNilainfix =V18V23Aainfix =V21V22aConsVVV14Aainfix =V19ainfix -V15c1Aainfix =anthV24V18aSomeagetV12ainfix -ainfix +V20V24V2Iainfix &lt;=c0ainfix -ainfix +V20V24V2Aainfix =anthV24V18aSomeagetV12ainfix +V20V24Iainfix &lt;ainfix +V20V24V2Iainfix &lt;V24V19Aainfix &lt;=c0V24FAainfix =V19alengthV18Aainfix &lt;=V19V2Aainfix &lt;=c0V19Aainfix &lt;V20V2Aainfix &lt;=c0V20FFIainfix &gt;V15c0Iainfix =V17c1ICfaNilainfix =V14V26Aainfix =V17V25aConsVVV11Aainfix =V15ainfix -V13c1Aainfix =anthV27V14aSomeagetV12ainfix -ainfix +V16V27V2Iainfix &lt;=c0ainfix -ainfix +V16V27V2Aainfix =anthV27V14aSomeagetV12ainfix +V16V27Iainfix &lt;ainfix +V16V27V2Iainfix &lt;V27V15Aainfix &lt;=c0V27FAainfix =V15alengthV14Aainfix &lt;=V15V2Aainfix &lt;=c0V15Aainfix &lt;V16V2Aainfix &lt;=c0V16FFIainfix &gt;V13c0Iainfix =V11ainfix ++V8aConsc3aNilAainfix =V13ainfix +V10c1Aainfix &lt;=c0V2Aainfix =anthV28V11aSomeagetV12ainfix -ainfix +V0V28V2Iainfix &lt;=c0ainfix -ainfix +V0V28V2Aainfix =anthV28V11aSomeagetV12ainfix +V0V28Iainfix &lt;ainfix +V0V28V2Iainfix &lt;V28V13Aainfix &lt;=c0V28FAainfix =V13alengthV11Aainfix &lt;=V13V2Aainfix &lt;=c0V13Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V10V2Iainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV29V8aSomeagetV9ainfix -ainfix +V0V29V2Iainfix &lt;=c0ainfix -ainfix +V0V29V2Aainfix =anthV29V8aSomeagetV9ainfix +V0V29Iainfix &lt;ainfix +V0V29V2Iainfix &lt;V29V10Aainfix &lt;=c0V29FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V7V2Iainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV30V5aSomeagetV6ainfix -ainfix +V0V30V2Iainfix &lt;=c0ainfix -ainfix +V0V30V2Aainfix =anthV30V5aSomeagetV6ainfix +V0V30Iainfix &lt;ainfix +V0V30V2Iainfix &lt;V30V7Aainfix &lt;=c0V30FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c10Aainfix &lt;=c0V2Aainfix =anthV31V4aSomeagetV3ainfix -ainfix +V0V31V2Iainfix &lt;=c0ainfix -ainfix +V0V31V2Aainfix =anthV31V4aSomeagetV3ainfix +V0V31Iainfix &lt;ainfix +V0V31V2Iainfix &lt;V31V1Aainfix &lt;=c0V31FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c10c0">
494
      <label name="expl:VC for harness"/>
MARCHE Claude's avatar
MARCHE Claude committed
495
      <proof prover="1" memlimit="0">
496
       <result status="valid" time="0.04"/>
497 498
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
499
     <goal name="WP_parameter harness.10" expl="10. assertion"
500
      sum="6b34c9fc95c34f70a4725cb40385c26e" proved="true"
501
      shape="assertionainfix =V25c3ICfaNilainfix =V22V27Aainfix =V25V26aConsVVV18Aainfix =V23ainfix -V19c1Aainfix =anthV28V22aSomeagetV12ainfix -ainfix +V24V28V2Iainfix &lt;=c0ainfix -ainfix +V24V28V2Aainfix =anthV28V22aSomeagetV12ainfix +V24V28Iainfix &lt;ainfix +V24V28V2Iainfix &lt;V28V23Aainfix &lt;=c0V28FAainfix =V23alengthV22Aainfix &lt;=V23V2Aainfix &lt;=c0V23Aainfix &lt;V24V2Aainfix &lt;=c0V24FFIainfix &gt;V19c0Iainfix =V21c2ICfaNilainfix =V18V30Aainfix =V21V29aConsVVV14Aainfix =V19ainfix -V15c1Aainfix =anthV31V18aSomeagetV12ainfix -ainfix +V20V31V2Iainfix &lt;=c0ainfix -ainfix +V20V31V2Aainfix =anthV31V18aSomeagetV12ainfix +V20V31Iainfix &lt;ainfix +V20V31V2Iainfix &lt;V31V19Aainfix &lt;=c0V31FAainfix =V19alengthV18Aainfix &lt;=V19V2Aainfix &lt;=c0V19Aainfix &lt;V20V2Aainfix &lt;=c0V20FFIainfix &gt;V15c0Iainfix =V17c1ICfaNilainfix =V14V33Aainfix =V17V32aConsVVV11Aainfix =V15ainfix -V13c1Aainfix =anthV34V14aSomeagetV12ainfix -ainfix +V16V34V2Iainfix &lt;=c0ainfix -ainfix +V16V34V2Aainfix =anthV34V14aSomeagetV12ainfix +V16V34Iainfix &lt;ainfix +V16V34V2Iainfix &lt;V34V15Aainfix &lt;=c0V34FAainfix =V15alengthV14Aainfix &lt;=V15V2Aainfix &lt;=c0V15Aainfix &lt;V16V2Aainfix &lt;=c0V16FFIainfix &gt;V13c0Iainfix =V11ainfix ++V8aConsc3aNilAainfix =V13ainfix +V10c1Aainfix &lt;=c0V2Aainfix =anthV35V11aSomeagetV12ainfix -ainfix +V0V35V2Iainfix &lt;=c0ainfix -ainfix +V0V35V2Aainfix =anthV35V11aSomeagetV12ainfix +V0V35Iainfix &lt;ainfix +V0V35V2Iainfix &lt;V35V13Aainfix &lt;=c0V35FAainfix =V13alengthV11Aainfix &lt;=V13V2Aainfix &lt;=c0V13Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V10V2Iainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV36V8aSomeagetV9ainfix -ainfix +V0V36V2Iainfix &lt;=c0ainfix -ainfix +V0V36V2Aainfix =anthV36V8aSomeagetV9ainfix +V0V36Iainfix &lt;ainfix +V0V36V2Iainfix &lt;V36V10Aainfix &lt;=c0V36FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V7V2Iainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV37V5aSomeagetV6ainfix -ainfix +V0V37V2Iainfix &lt;=c0ainfix -ainfix +V0V37V2Aainfix =anthV37V5aSomeagetV6ainfix +V0V37Iainfix &lt;ainfix +V0V37V2Iainfix &lt;V37V7Aainfix &lt;=c0V37FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c10Aainfix &lt;=c0V2Aainfix =anthV38V4aSomeagetV3ainfix -ainfix +V0V38V2Iainfix &lt;=c0ainfix -ainfix +V0V38V2Aainfix =anthV38V4aSomeagetV3ainfix +V0V38Iainfix &lt;ainfix +V0V38V2Iainfix &lt;V38V1Aainfix &lt;=c0V38FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c10c0">
502
      <label name="expl:VC for harness"/>
MARCHE Claude's avatar
MARCHE Claude committed
503
      <proof prover="1" timelimit="14" memlimit="0">
MARCHE Claude's avatar
MARCHE Claude committed
504
       <result status="valid" time="1.07"/>
505 506 507 508
      </proof>
     </goal>
    </transf>
   </goal>
MARCHE Claude's avatar
MARCHE Claude committed
509
   <goal name="WP_parameter harness2" expl="VC for harness2"
510
    sum="e8594ee5b48cd891dc79c12714adf8c0" proved="true"
511
    shape="ainfix =V32c4ICfaNilainfix =V29V34Aainfix =V32V33aConsVVV25Aainfix =V30ainfix -V26c1Aainfix =anthV35V29aSomeagetV19ainfix -ainfix +V31V35V2Iainfix &lt;=c0ainfix -ainfix +V31V35V2Aainfix =anthV35V29aSomeagetV19ainfix +V31V35Iainfix &lt;ainfix +V31V35V2Iainfix &lt;V35V30Aainfix &lt;=c0V35FAainfix =V30alengthV29Aainfix &lt;=V30V2Aainfix &lt;=c0V30Aainfix &lt;V31V2Aainfix &lt;=c0V31FFAainfix &gt;V26c0Aainfix =V25aConsc4aNilAainfix =V28c3ICfaNilainfix =V25V37Aainfix =V28V36aConsVVV21Aainfix =V26ainfix -V22c1Aainfix =anthV38V25aSomeagetV19ainfix -ainfix +V27V38V2Iainfix &lt;=c0ainfix -ainfix +V27V38V2Aainfix =anthV38V25aSomeagetV19ainfix +V27V38Iainfix &lt;ainfix +V27V38V2Iainfix &lt;V38V26Aainfix &lt;=c0V38FAainfix =V26alengthV25Aainfix &lt;=V26V2Aainfix &lt;=c0V26Aainfix &lt;V27V2Aainfix &lt;=c0V27FFAainfix &gt;V22c0Aainfix =V21aConsc3aConsc4aNilAainfix =V24c2ICfaNilainfix =V21V40Aainfix =V24V39aConsVVV18Aainfix =V22ainfix -V20c1Aainfix =anthV41V21aSomeagetV19ainfix -ainfix +V23V41V2Iainfix &lt;=c0ainfix -ainfix +V23V41V2Aainfix =anthV41V21aSomeagetV19ainfix +V23V41Iainfix &lt;ainfix +V23V41V2Iainfix &lt;V41V22Aainfix &lt;=c0V41FAainfix =V22alengthV21Aainfix &lt;=V22V2Aainfix &lt;=c0V22Aainfix &lt;V23V2Aainfix &lt;=c0V23FFAainfix &gt;V20c0Aainfix =V18aConsc2aConsc3aConsc4aNilIainfix =V18ainfix ++V14aConsc4aNilAainfix =V20ainfix +V15c1Aainfix &lt;=c0V2Aainfix =anthV42V18aSomeagetV19ainfix -ainfix +V16V42V2Iainfix &lt;=c0ainfix -ainfix +V16V42V2Aainfix =anthV42V18aSomeagetV19ainfix +V16V42Iainfix &lt;ainfix +V16V42V2Iainfix &lt;V42V20Aainfix &lt;=c0V42FAainfix =V20alengthV18Aainfix &lt;=V20V2Aainfix &lt;=c0V20Aainfix &lt;V16V2Aainfix &lt;=c0V16FAainfix &lt;V15V2Aainfix =V14aConsc2aConsc3aNilAainfix =V17c1ICfaNilainfix =V14V44Aainfix =V17V43aConsVVV11Aainfix =V15ainfix -V13c1Aainfix =anthV45V14aSomeagetV12ainfix -ainfix +V16V45V2Iainfix &lt;=c0ainfix -ainfix +V16V45V2Aainfix =anthV45V14aSomeagetV12ainfix +V16V45Iainfix &lt;ainfix +V16V45V2Iainfix &lt;V45V15Aainfix &lt;=c0V45FAainfix =V15alengthV14Aainfix &lt;=V15V2Aainfix &lt;=c0V15Aainfix &lt;V16V2Aainfix &lt;=c0V16FFAainfix &gt;V13c0Aainfix =V11aConsc1aConsc2aConsc3aNilIainfix =V11ainfix ++V8aConsc3aNilAainfix =V13ainfix +V10c1Aainfix &lt;=c0V2Aainfix =anthV46V11aSomeagetV12ainfix -ainfix +V0V46V2Iainfix &lt;=c0ainfix -ainfix +V0V46V2Aainfix =anthV46V11aSomeagetV12ainfix +V0V46Iainfix &lt;ainfix +V0V46V2Iainfix &lt;V46V13Aainfix &lt;=c0V46FAainfix =V13alengthV11Aainfix &lt;=V13V2Aainfix &lt;=c0V13Aainfix &lt;V0V2Aainfix &lt;=c0V0FAainfix &lt;V10V2Aainfix =V8aConsc1aConsc2aNilIainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV47V8aSomeagetV9ainfix -ainfix +V0V47V2Iainfix &lt;=c0ainfix -ainfix +V0V47V2Aainfix =anthV47V8aSomeagetV9ainfix +V0V47Iainfix &lt;ainfix +V0V47V2Iainfix &lt;V47V10Aainfix &lt;=c0V47FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FAainfix &lt;V7V2Aainfix =V5aConsc1aNilIainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV48V5aSomeagetV6ainfix -ainfix +V0V48V2Iainfix &lt;=c0ainfix -ainfix +V0V48V2Aainfix =anthV48V5aSomeagetV6ainfix +V0V48Iainfix &lt;ainfix +V0V48V2Iainfix &lt;V48V7Aainfix &lt;=c0V48FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FAainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c3Aainfix &lt;=c0V2Aainfix =anthV49V4aSomeagetV3ainfix -ainfix +V0V49V2Iainfix &lt;=c0ainfix -ainfix +V0V49V2Aainfix =anthV49V4aSomeagetV3ainfix +V0V49Iainfix &lt;ainfix +V0V49V2Iainfix &lt;V49V1Aainfix &lt;=c0V49FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FAainfix &gt;c3c0">
512 513 514
    <label name="expl:VC for harness2"/>
    <transf name="split_goal"
     proved="true">
MARCHE Claude's avatar
MARCHE Claude committed
515
     <goal name="WP_parameter harness2.1" expl="1. precondition"
516
      sum="1ff3da5dafd8019751263ac54dc7d27c" proved="true"
517
      shape="preconditionainfix &gt;c3c0">
518
      <label name="expl:VC for harness2"/>
MARCHE Claude's avatar
MARCHE Claude committed
519
      <proof prover="1" memlimit="0">
520
       <result status="valid" time="0.00"/>
521 522
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
523
     <goal name="WP_parameter harness2.2" expl="2. precondition"
524
      sum="09df1ce16481310ad8f77d9282754d45" proved="true"
525
      shape="preconditionainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c3Aainfix &lt;=c0V2Aainfix =anthV5V4aSomeagetV3ainfix -ainfix +V0V5V2Iainfix &lt;=c0ainfix -ainfix +V0V5V2Aainfix =anthV5V4aSomeagetV3ainfix +V0V5Iainfix &lt;ainfix +V0V5V2Iainfix &lt;V5V1Aainfix &lt;=c0V5FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c3c0">
526
      <label name="expl:VC for harness2"/>
MARCHE Claude's avatar
MARCHE Claude committed
527
      <proof prover="1" memlimit="0">
528 529
       <result status="valid" time="0.01"/>
      </proof>
530
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
531
     <goal name="WP_parameter harness2.3" expl="3. assertion"
532
      sum="045ad1c082715ac69f3d872b41155453" proved="true"
533
      shape="assertionainfix =V5aConsc1aNilIainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV8V5aSomeagetV6ainfix -ainfix +V0V8V2Iainfix &lt;=c0ainfix -ainfix +V0V8V2Aainfix =anthV8V5aSomeagetV6ainfix +V0V8Iainfix &lt;ainfix +V0V8V2Iainfix &lt;V8V7Aainfix &lt;=c0V8FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c3Aainfix &lt;=c0V2Aainfix =anthV9V4aSomeagetV3ainfix -ainfix +V0V9V2Iainfix &lt;=c0ainfix -ainfix +V0V9V2Aainfix =anthV9V4aSomeagetV3ainfix +V0V9Iainfix &lt;ainfix +V0V9V2Iainfix &lt;V9V1Aainfix &lt;=c0V9FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c3c0">
534
      <label name="expl:VC for harness2"/>
MARCHE Claude's avatar
MARCHE Claude committed
535
      <proof prover="1" memlimit="0">
536
       <result status="valid" time="0.01"/>
537 538
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
539
     <goal name="WP_parameter harness2.4" expl="4. precondition"
540
      sum="6bb4abe05918ef88eb2c665111781b04" proved="true"
541
      shape="preconditionainfix &lt;V7V2Iainfix =V5aConsc1aNilIainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV8V5aSomeagetV6ainfix -ainfix +V0V8V2Iainfix &lt;=c0ainfix -ainfix +V0V8V2Aainfix =anthV8V5aSomeagetV6ainfix +V0V8Iainfix &lt;ainfix +V0V8V2Iainfix &lt;V8V7Aainfix &lt;=c0V8FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c3Aainfix &lt;=c0V2Aainfix =anthV9V4aSomeagetV3ainfix -ainfix +V0V9V2Iainfix &lt;=c0ainfix -ainfix +V0V9V2Aainfix =anthV9V4aSomeagetV3ainfix +V0V9Iainfix &lt;ainfix +V0V9V2Iainfix &lt;V9V1Aainfix &lt;=c0V9FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c3c0">
542
      <label name="expl:VC for harness2"/>
MARCHE Claude's avatar
MARCHE Claude committed
543
      <proof prover="1" memlimit="0">
544
       <result status="valid" time="0.01"/>
545 546
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
547
     <goal name="WP_parameter harness2.5" expl="5. assertion"
548
      sum="0f43588571ae0a129654715199493383" proved="true"
549
      shape="assertionainfix =V8aConsc1aConsc2aNilIainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV11V8aSomeagetV9ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V8aSomeagetV9ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V10Aainfix &lt;=c0V11FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V7V2Iainfix =V5aConsc1aNilIainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV12V5aSomeagetV6ainfix -ainfix +V0V12V2Iainfix &lt;=c0ainfix -ainfix +V0V12V2Aainfix =anthV12V5aSomeagetV6ainfix +V0V12Iainfix &lt;ainfix +V0V12V2Iainfix &lt;V12V7Aainfix &lt;=c0V12FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c3Aainfix &lt;=c0V2Aainfix =anthV13V4aSomeagetV3ainfix -ainfix +V0V13V2Iainfix &lt;=c0ainfix -ainfix +V0V13V2Aainfix =anthV13V4aSomeagetV3ainfix +V0V13Iainfix &lt;ainfix +V0V13V2Iainfix &lt;V13V1Aainfix &lt;=c0V13FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c3c0">
550
      <label name="expl:VC for harness2"/>
MARCHE Claude's avatar
MARCHE Claude committed
551
      <proof prover="1" memlimit="0">
552
       <result status="valid" time="0.08"/>
553 554
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
555
     <goal name="WP_parameter harness2.6" expl="6. precondition"
556
      sum="231cef8a751dc622b6362b3fe0a3f89b" proved="true"
557
      shape="preconditionainfix &lt;V10V2Iainfix =V8aConsc1aConsc2aNilIainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV11V8aSomeagetV9ainfix -ainfix +V0V11V2Iainfix &lt;=c0ainfix -ainfix +V0V11V2Aainfix =anthV11V8aSomeagetV9ainfix +V0V11Iainfix &lt;ainfix +V0V11V2Iainfix &lt;V11V10Aainfix &lt;=c0V11FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V7V2Iainfix =V5aConsc1aNilIainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV12V5aSomeagetV6ainfix -ainfix +V0V12V2Iainfix &lt;=c0ainfix -ainfix +V0V12V2Aainfix =anthV12V5aSomeagetV6ainfix +V0V12Iainfix &lt;ainfix +V0V12V2Iainfix &lt;V12V7Aainfix &lt;=c0V12FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c3Aainfix &lt;=c0V2Aainfix =anthV13V4aSomeagetV3ainfix -ainfix +V0V13V2Iainfix &lt;=c0ainfix -ainfix +V0V13V2Aainfix =anthV13V4aSomeagetV3ainfix +V0V13Iainfix &lt;ainfix +V0V13V2Iainfix &lt;V13V1Aainfix &lt;=c0V13FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c3c0">
558
      <label name="expl:VC for harness2"/>
MARCHE Claude's avatar
MARCHE Claude committed
559
      <proof prover="1" memlimit="0">
560
       <result status="valid" time="0.02"/>
561 562
      </proof>
     </goal>
MARCHE Claude's avatar
MARCHE Claude committed
563
     <goal name="WP_parameter harness2.7" expl="7. assertion"
564
      sum="1034bc69add43293d45286558ac7560f" proved="true"
565
      shape="assertionainfix =V11aConsc1aConsc2aConsc3aNilIainfix =V11ainfix ++V8aConsc3aNilAainfix =V13ainfix +V10c1Aainfix &lt;=c0V2Aainfix =anthV14V11aSomeagetV12ainfix -ainfix +V0V14V2Iainfix &lt;=c0ainfix -ainfix +V0V14V2Aainfix =anthV14V11aSomeagetV12ainfix +V0V14Iainfix &lt;ainfix +V0V14V2Iainfix &lt;V14V13Aainfix &lt;=c0V14FAainfix =V13alengthV11Aainfix &lt;=V13V2Aainfix &lt;=c0V13Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V10V2Iainfix =V8aConsc1aConsc2aNilIainfix =V8ainfix ++V5aConsc2aNilAainfix =V10ainfix +V7c1Aainfix &lt;=c0V2Aainfix =anthV15V8aSomeagetV9ainfix -ainfix +V0V15V2Iainfix &lt;=c0ainfix -ainfix +V0V15V2Aainfix =anthV15V8aSomeagetV9ainfix +V0V15Iainfix &lt;ainfix +V0V15V2Iainfix &lt;V15V10Aainfix &lt;=c0V15FAainfix =V10alengthV8Aainfix &lt;=V10V2Aainfix &lt;=c0V10Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V7V2Iainfix =V5aConsc1aNilIainfix =V5ainfix ++V4aConsc1aNilAainfix =V7ainfix +V1c1Aainfix &lt;=c0V2Aainfix =anthV16V5aSomeagetV6ainfix -ainfix +V0V16V2Iainfix &lt;=c0ainfix -ainfix +V0V16V2Aainfix =anthV16V5aSomeagetV6ainfix +V0V16Iainfix &lt;ainfix +V0V16V2Iainfix &lt;V16V7Aainfix &lt;=c0V16FAainfix =V7alengthV5Aainfix &lt;=V7V2Aainfix &lt;=c0V7Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &lt;V1V2Iainfix =V4aNilAainfix =V2c3Aainfix &lt;=c0V2Aainfix =anthV17V4aSomeagetV3ainfix -ainfix +V0V17V2Iainfix &lt;=c0ainfix -ainfix +V0V17V2Aainfix =anthV17V4aSomeagetV3ainfix +V0V17Iainfix &lt;ainfix +V0V17V2Iainfix &lt;V17V1Aainfix &lt;=c0V17FAainfix =V1alengthV4Aainfix &lt;=V1V2Aainfix &lt;=c0V1Aainfix &lt;V0V2Aainfix &lt;=c0V0FIainfix &gt;c3c0">
566
      <label name="expl:VC for harness2"/>
MARCHE Claude's avatar
MARCHE Claude committed
567
      <proof prover="0" memlimit="1000">
568
       <result status="valid" time="0.04"/>
Jean-Christophe Filliâtre's avatar