1 <?xml version="1.0" encoding="UTF-8"?>
2 <!DOCTYPE why3session PUBLIC "-//Why3//proof session v5//EN"
3 "https://www.why3.org/why3session.dtd">
4 <why3session shape_version="6">
5 <prover id="1" name="CVC5" version="1.0.5" timelimit="1" steplimit="0" memlimit="1000"/>
6 <prover id="2" name="CVC3" version="2.4.1" timelimit="5" steplimit="0" memlimit="1000"/>
7 <prover id="3" name="Alt-Ergo" version="2.6.0" timelimit="5" steplimit="0" memlimit="1000"/>
8 <prover id="5" name="Eprover" version="2.0" timelimit="5" steplimit="0" memlimit="1000"/>
9 <prover id="6" name="CVC4" version="1.8" timelimit="5" steplimit="0" memlimit="1000"/>
10 <file format="whyml" proved="true">
11 <path name=".."/><path name="koda_ruskey.mlw"/>
12 <theory name="KodaRuskey_Spec" proved="true">
13 <goal name="eq_color'vc" expl="VC for eq_color" proved="true">
14 <proof prover="3"><result status="valid" time="0.000000" steps="8"/></proof>
15 <proof prover="6"><result status="valid" time="0.030000" steps="2751"/></proof>
17 <goal name="size_forest_nonneg" proved="true">
18 <transf name="induction_ty_lex" proved="true" >
19 <goal name="size_forest_nonneg.0" proved="true">
20 <proof prover="3"><result status="valid" time="0.000000" steps="13"/></proof>
21 <proof prover="6"><result status="valid" time="0.030000" steps="2967"/></proof>
25 <goal name="count_forest_nonneg" proved="true">
26 <transf name="induction_ty_lex" proved="true" >
27 <goal name="count_forest_nonneg.0" proved="true">
28 <proof prover="3"><result status="valid" time="0.010000" steps="27"/></proof>
29 <proof prover="6"><result status="valid" time="0.050000" steps="3533"/></proof>
34 <theory name="Lemmas" proved="true">
35 <goal name="mem_app" proved="true">
36 <transf name="induction_ty_lex" proved="true" >
37 <goal name="mem_app.0" proved="true">
38 <proof prover="3"><result status="valid" time="0.010000" steps="71"/></proof>
39 <proof prover="6"><result status="valid" time="0.060000" steps="7004"/></proof>
43 <goal name="size_stack_nonneg" proved="true">
44 <transf name="induction_ty_lex" proved="true" >
45 <goal name="size_stack_nonneg.0" proved="true">
46 <proof prover="3"><result status="valid" time="0.010000" steps="35"/></proof>
47 <proof prover="6"><result status="valid" time="0.060000" steps="5865"/></proof>
51 <goal name="white_forest_equiv" proved="true">
52 <transf name="induction_ty_lex" proved="true" >
53 <goal name="white_forest_equiv.0" proved="true">
54 <proof prover="3"><result status="valid" time="0.020000" steps="222"/></proof>
55 <proof prover="6"><result status="valid" time="0.060000" steps="6652"/></proof>
59 <goal name="any_forest_frame" proved="true">
60 <transf name="induction_ty_lex" proved="true" >
61 <goal name="any_forest_frame.0" proved="true">
62 <proof prover="3"><result status="valid" time="0.040000" steps="358"/></proof>
63 <proof prover="6"><result status="valid" time="0.110000" steps="12962"/></proof>
67 <goal name="any_stack_frame" proved="true">
68 <transf name="induction_ty_lex" proved="true" >
69 <goal name="any_stack_frame.0" proved="true">
70 <transf name="split_vc" proved="true" >
71 <goal name="any_stack_frame.0.0" proved="true">
72 <proof prover="3"><result status="valid" time="0.000000" steps="19"/></proof>
73 <proof prover="6"><result status="valid" time="0.050000" steps="5993"/></proof>
75 <goal name="any_stack_frame.0.1" proved="true">
76 <transf name="compute_in_goal" proved="true" >
77 <goal name="any_stack_frame.0.1.0" proved="true">
78 <transf name="split_vc" proved="true" >
79 <goal name="any_stack_frame.0.1.0.0" proved="true">
80 <proof prover="3"><result status="valid" time="0.020000" steps="172"/></proof>
81 <proof prover="6"><result status="valid" time="0.070000" steps="7971"/></proof>
83 <goal name="any_stack_frame.0.1.0.1" proved="true">
84 <proof prover="2"><result status="valid" time="0.080000"/></proof>
94 <goal name="inverse_frame" proved="true">
95 <transf name="induction_ty_lex" proved="true" >
96 <goal name="inverse_frame.0" proved="true">
97 <proof prover="3"><result status="valid" time="0.050000" steps="229"/></proof>
101 <goal name="inverse_frame2" proved="true">
102 <transf name="induction_ty_lex" proved="true" >
103 <goal name="inverse_frame2.0" proved="true">
104 <proof prover="3"><result status="valid" time="0.050000" steps="225"/></proof>
108 <goal name="inverse_any'vc" expl="VC for inverse_any" proved="true">
109 <transf name="induction_ty_lex" proved="true" >
110 <goal name="inverse_any'vc.0" expl="VC for inverse_any" proved="true">
111 <proof prover="3"><result status="valid" time="0.020000" steps="75"/></proof>
112 <proof prover="6"><result status="valid" time="0.050000" steps="7787"/></proof>
116 <goal name="inverse_final" proved="true">
117 <proof prover="3"><result status="valid" time="0.150000" steps="683"/></proof>
119 <goal name="inverse_white" proved="true">
120 <proof prover="3"><result status="valid" time="0.010000" steps="69"/></proof>
121 <proof prover="6"><result status="valid" time="0.060000" steps="7653"/></proof>
123 <goal name="white_final_exclusive'vc" expl="VC for white_final_exclusive" proved="true">
124 <proof prover="3"><result status="valid" time="0.020000" steps="29"/></proof>
126 <goal name="final_unique" proved="true">
127 <transf name="induction_ty_lex" proved="true" >
128 <goal name="final_unique.0" proved="true">
129 <proof prover="3"><result status="valid" time="0.040000" steps="510"/></proof>
130 <proof prover="6"><result status="valid" time="0.070000" steps="8804"/></proof>
134 <goal name="inverse_inverse'vc" expl="VC for inverse_inverse" proved="true">
135 <proof prover="3"><result status="valid" time="0.163746" steps="3154"/></proof>
136 <proof prover="6"><result status="valid" time="0.450000" steps="38955"/></proof>
138 <goal name="sub_not_nil" proved="true">
139 <transf name="induction_pr" proved="true" >
140 <goal name="sub_not_nil.0" proved="true">
141 <proof prover="3"><result status="valid" time="0.020000" steps="21"/></proof>
142 <proof prover="6"><result status="valid" time="0.060000" steps="7382"/></proof>
144 <goal name="sub_not_nil.1" proved="true">
145 <proof prover="3"><result status="valid" time="0.010000" steps="10"/></proof>
146 <proof prover="6"><result status="valid" time="0.040000" steps="7624"/></proof>
148 <goal name="sub_not_nil.2" proved="true">
149 <proof prover="3"><result status="valid" time="0.020000" steps="60"/></proof>
150 <proof prover="6"><result status="valid" time="0.080000" steps="10336"/></proof>
154 <goal name="sub_empty" proved="true">
155 <transf name="induction_pr" proved="true" >
156 <goal name="sub_empty.0" proved="true">
157 <proof prover="3"><result status="valid" time="0.010000" steps="28"/></proof>
158 <proof prover="6"><result status="valid" time="0.070000" steps="8596"/></proof>
160 <goal name="sub_empty.1" proved="true">
161 <proof prover="3"><result status="valid" time="0.020000" steps="29"/></proof>
162 <proof prover="6"><result status="valid" time="0.070000" steps="9222"/></proof>
164 <goal name="sub_empty.2" proved="true">
165 <proof prover="6"><result status="valid" time="0.150000" steps="17072"/></proof>
169 <goal name="sub_mem" proved="true">
170 <transf name="induction_pr" proved="true" >
171 <goal name="sub_mem.0" proved="true">
172 <proof prover="3"><result status="valid" time="0.020000" steps="38"/></proof>
173 <proof prover="6"><result status="valid" time="0.060000" steps="8604"/></proof>
175 <goal name="sub_mem.1" proved="true">
176 <proof prover="3"><result status="valid" time="0.010000" steps="25"/></proof>
177 <proof prover="6"><result status="valid" time="0.050000" steps="7410"/></proof>
179 <goal name="sub_mem.2" proved="true">
180 <proof prover="3"><result status="valid" time="0.030000" steps="191"/></proof>
181 <proof prover="6"><result status="valid" time="0.070000" steps="11067"/></proof>
185 <goal name="sub_weaken1" proved="true">
186 <transf name="induction_pr" proved="true" >
187 <goal name="sub_weaken1.0" proved="true">
188 <proof prover="3"><result status="valid" time="0.040000" steps="333"/></proof>
189 <proof prover="6"><result status="valid" time="0.080000" steps="9920"/></proof>
191 <goal name="sub_weaken1.1" proved="true">
192 <proof prover="3"><result status="valid" time="0.020000" steps="35"/></proof>
193 <proof prover="6"><result status="valid" time="0.060000" steps="9350"/></proof>
195 <goal name="sub_weaken1.2" proved="true">
196 <proof prover="6"><result status="valid" time="0.160000" steps="19247"/></proof>
200 <goal name="sub_weaken2" proved="true">
201 <transf name="induction_pr" proved="true" >
202 <goal name="sub_weaken2.0" proved="true">
203 <proof prover="6"><result status="valid" time="0.100000" steps="14475"/></proof>
205 <goal name="sub_weaken2.1" proved="true">
206 <proof prover="3"><result status="valid" time="0.020000" steps="39"/></proof>
207 <proof prover="6"><result status="valid" time="0.060000" steps="9737"/></proof>
209 <goal name="sub_weaken2.2" proved="true">
210 <proof prover="6"><result status="valid" time="0.270000" steps="29588"/></proof>
214 <goal name="not_mem_st" proved="true">
215 <transf name="induction_pr" proved="true" >
216 <goal name="not_mem_st.0" proved="true">
217 <proof prover="3"><result status="valid" time="0.020000" steps="38"/></proof>
218 <proof prover="6"><result status="valid" time="0.070000" steps="8910"/></proof>
220 <goal name="not_mem_st.1" proved="true">
221 <proof prover="3"><result status="valid" time="0.020000" steps="25"/></proof>
222 <proof prover="6"><result status="valid" time="0.050000" steps="7781"/></proof>
224 <goal name="not_mem_st.2" proved="true">
225 <proof prover="3"><result status="valid" time="0.030000" steps="221"/></proof>
226 <proof prover="6"><result status="valid" time="0.080000" steps="11379"/></proof>
230 <goal name="sub_frame" proved="true">
231 <transf name="induction_pr" proved="true" >
232 <goal name="sub_frame.0" proved="true">
233 <proof prover="3"><result status="valid" time="0.010000" steps="22"/></proof>
234 <proof prover="6"><result status="valid" time="0.060000" steps="8902"/></proof>
236 <goal name="sub_frame.1" proved="true">
237 <proof prover="3"><result status="valid" time="0.050000" steps="352"/></proof>
238 <proof prover="6"><result status="valid" time="0.070000" steps="9779"/></proof>
240 <goal name="sub_frame.2" proved="true">
241 <proof prover="6"><result status="valid" time="0.130000" steps="17653"/></proof>
245 <goal name="sub_no_rep" proved="true">
246 <transf name="induction_pr" proved="true" >
247 <goal name="sub_no_rep.0" proved="true">
248 <proof prover="3"><result status="valid" time="0.020000" steps="31"/></proof>
249 <proof prover="6"><result status="valid" time="0.060000" steps="9467"/></proof>
251 <goal name="sub_no_rep.1" proved="true">
252 <proof prover="3"><result status="valid" time="0.020000" steps="32"/></proof>
253 <proof prover="6"><result status="valid" time="0.060000" steps="9110"/></proof>
255 <goal name="sub_no_rep.2" proved="true">
256 <proof prover="6"><result status="valid" time="0.110000" steps="15493"/></proof>
260 <goal name="sub_no_rep2" proved="true">
261 <transf name="induction_pr" proved="true" >
262 <goal name="sub_no_rep2.0" proved="true">
263 <proof prover="3"><result status="valid" time="0.010000" steps="73"/></proof>
264 <proof prover="6"><result status="valid" time="0.060000" steps="9739"/></proof>
266 <goal name="sub_no_rep2.1" proved="true">
267 <proof prover="3"><result status="valid" time="0.010000" steps="31"/></proof>
268 <proof prover="6"><result status="valid" time="0.060000" steps="9289"/></proof>
270 <goal name="sub_no_rep2.2" proved="true">
271 <proof prover="1"><result status="valid" time="0.317668" steps="44059"/></proof>
275 <goal name="white_valid" proved="true">
276 <transf name="induction_ty_lex" proved="true" >
277 <goal name="white_valid.0" proved="true">
278 <proof prover="3"><result status="valid" time="0.020000" steps="118"/></proof>
279 <proof prover="6"><result status="valid" time="0.060000" steps="9617"/></proof>
283 <goal name="final_valid" proved="true">
284 <transf name="induction_ty_lex" proved="true" >
285 <goal name="final_valid.0" proved="true">
286 <proof prover="3"><result status="valid" time="0.020000" steps="110"/></proof>
287 <proof prover="6"><result status="valid" time="0.070000" steps="9837"/></proof>
291 <goal name="valid_coloring_frame" proved="true">
292 <transf name="induction_ty_lex" proved="true" >
293 <goal name="valid_coloring_frame.0" proved="true">
294 <proof prover="3"><result status="valid" time="0.080000" steps="649"/></proof>
295 <proof prover="6"><result status="valid" time="0.100000" steps="14084"/></proof>
299 <goal name="valid_coloring_set" proved="true">
300 <transf name="induction_ty_lex" proved="true" >
301 <goal name="valid_coloring_set.0" proved="true">
302 <proof prover="3"><result status="valid" time="0.020000" steps="100"/></proof>
303 <proof prover="6"><result status="valid" time="0.070000" steps="10534"/></proof>
307 <goal name="head_and_tail" proved="true">
308 <transf name="induction_ty_lex" proved="true" >
309 <goal name="head_and_tail.0" proved="true">
310 <proof prover="3"><result status="valid" time="0.020000" steps="93"/></proof>
311 <proof prover="6"><result status="valid" time="0.080000" steps="13578"/></proof>
315 <goal name="sub_valid_coloring_f1" proved="true">
316 <proof prover="3"><result status="valid" time="0.040000" steps="302"/></proof>
317 <proof prover="6"><result status="valid" time="0.070000" steps="10843"/></proof>
319 <goal name="sub_valid_coloring" proved="true">
320 <transf name="induction_pr" proved="true" >
321 <goal name="sub_valid_coloring.0" proved="true">
322 <proof prover="3"><result status="valid" time="0.040000" steps="529"/></proof>
323 <proof prover="6"><result status="valid" time="0.080000" steps="13205"/></proof>
325 <goal name="sub_valid_coloring.1" proved="true">
326 <transf name="split_vc" proved="true" >
327 <goal name="sub_valid_coloring.1.0" proved="true">
328 <transf name="compute_in_goal" proved="true" >
329 <goal name="sub_valid_coloring.1.0.0" proved="true">
330 <transf name="split_vc" proved="true" >
331 <goal name="sub_valid_coloring.1.0.0.0" proved="true">
332 <proof prover="3"><result status="valid" time="0.160000" steps="3173"/></proof>
333 <proof prover="6"><result status="valid" time="0.160000" steps="25222"/></proof>
335 <goal name="sub_valid_coloring.1.0.0.1" proved="true">
336 <proof prover="2"><result status="valid" time="2.290000"/></proof>
338 <goal name="sub_valid_coloring.1.0.0.2" proved="true">
339 <proof prover="2"><result status="valid" time="1.760000"/></proof>
347 <goal name="sub_valid_coloring.2" proved="true">
348 <proof prover="3"><result status="valid" time="0.153095" steps="4820"/></proof>
352 <goal name="sub_Cons_N" proved="true">
353 <transf name="induction_pr" proved="true" >
354 <goal name="sub_Cons_N.0" proved="true">
355 <proof prover="3"><result status="valid" time="0.020000" steps="61"/></proof>
356 <proof prover="6"><result status="valid" time="0.080000" steps="11601"/></proof>
358 <goal name="sub_Cons_N.1" proved="true">
359 <proof prover="3"><result status="valid" time="0.020000" steps="106"/></proof>
360 <proof prover="6"><result status="valid" time="0.070000" steps="12256"/></proof>
362 <goal name="sub_Cons_N.2" proved="true">
363 <proof prover="3"><result status="valid" time="0.080000" steps="1163"/></proof>
364 <proof prover="6"><result status="valid" time="0.080000" steps="13307"/></proof>
368 <goal name="white_white" proved="true">
369 <proof prover="3"><result status="valid" time="0.020000" steps="52"/></proof>
370 <proof prover="6"><result status="valid" time="0.070000" steps="10284"/></proof>
372 <goal name="sub_valid_coloring_white'vc" expl="VC for sub_valid_coloring_white" proved="true">
373 <transf name="split_vc" proved="true" >
374 <goal name="sub_valid_coloring_white'vc.0" expl="variant decrease" proved="true">
375 <proof prover="3"><result status="valid" time="0.030000" steps="242"/></proof>
376 <proof prover="6"><result status="valid" time="0.070000" steps="10734"/></proof>
378 <goal name="sub_valid_coloring_white'vc.1" expl="precondition" proved="true">
379 <proof prover="3"><result status="valid" time="0.010000" steps="29"/></proof>
380 <proof prover="6"><result status="valid" time="0.050000" steps="9766"/></proof>
382 <goal name="sub_valid_coloring_white'vc.2" expl="precondition" proved="true">
383 <proof prover="3"><result status="valid" time="0.020000" steps="57"/></proof>
384 <proof prover="6"><result status="valid" time="0.070000" steps="10347"/></proof>
386 <goal name="sub_valid_coloring_white'vc.3" expl="precondition" proved="true">
387 <proof prover="3"><result status="valid" time="0.010000" steps="24"/></proof>
388 <proof prover="6"><result status="valid" time="0.040000" steps="9504"/></proof>
390 <goal name="sub_valid_coloring_white'vc.4" expl="variant decrease" proved="true">
391 <proof prover="3"><result status="valid" time="0.030000" steps="244"/></proof>
392 <proof prover="6"><result status="valid" time="0.080000" steps="11745"/></proof>
394 <goal name="sub_valid_coloring_white'vc.5" expl="precondition" proved="true">
395 <proof prover="3"><result status="valid" time="0.020000" steps="29"/></proof>
396 <proof prover="6"><result status="valid" time="0.060000" steps="10706"/></proof>
398 <goal name="sub_valid_coloring_white'vc.6" expl="precondition" proved="true">
399 <proof prover="3"><result status="valid" time="0.010000" steps="28"/></proof>
400 <proof prover="6"><result status="valid" time="0.060000" steps="10728"/></proof>
402 <goal name="sub_valid_coloring_white'vc.7" expl="precondition" proved="true">
403 <proof prover="3"><result status="valid" time="0.010000" steps="24"/></proof>
404 <proof prover="6"><result status="valid" time="0.040000" steps="10409"/></proof>
406 <goal name="sub_valid_coloring_white'vc.8" expl="postcondition" proved="true">
407 <transf name="compute_in_goal" proved="true" >
408 <goal name="sub_valid_coloring_white'vc.8.0" expl="postcondition" proved="true">
409 <transf name="split_vc" proved="true" >
410 <goal name="sub_valid_coloring_white'vc.8.0.0" expl="postcondition" proved="true">
411 <proof prover="2"><result status="valid" time="3.500000"/></proof>
413 <goal name="sub_valid_coloring_white'vc.8.0.1" expl="postcondition" proved="true">
414 <proof prover="3"><result status="valid" time="0.376082" steps="12128"/></proof>
416 <goal name="sub_valid_coloring_white'vc.8.0.2" expl="postcondition" proved="true">
417 <proof prover="2"><result status="valid" time="2.990000"/></proof>
425 <goal name="count_stack_nonneg" proved="true">
426 <transf name="induction_ty_lex" proved="true" >
427 <goal name="count_stack_nonneg.0" proved="true">
428 <proof prover="3"><result status="valid" time="0.020000" steps="73"/></proof>
429 <proof prover="6"><result status="valid" time="0.090000" steps="16704"/></proof>
433 <goal name="stored_trans1'vc" expl="VC for stored_trans1" proved="true">
434 <proof prover="3"><result status="valid" time="0.266409" steps="4317"/></proof>
436 <goal name="stored_trans2'vc" expl="VC for stored_trans2" proved="true">
437 <proof prover="3"><result status="valid" time="0.400000" steps="4267"/></proof>
440 <theory name="KodaRuskey" proved="true">
441 <goal name="enum'vc" expl="VC for enum" proved="true">
442 <transf name="split_goal_right" proved="true" >
443 <goal name="enum'vc.0" expl="unreachable point" proved="true">
444 <proof prover="3"><result status="valid" time="0.020000" steps="14"/></proof>
445 <proof prover="6"><result status="valid" time="0.080000" steps="15267"/></proof>
447 <goal name="enum'vc.1" expl="assertion" proved="true">
448 <proof prover="3"><result status="valid" time="0.020000" steps="17"/></proof>
449 <proof prover="6"><result status="valid" time="0.070000" steps="15369"/></proof>
451 <goal name="enum'vc.2" expl="postcondition" proved="true">
452 <proof prover="3"><result status="valid" time="0.010000" steps="14"/></proof>
453 <proof prover="6"><result status="valid" time="0.060000" steps="14303"/></proof>
455 <goal name="enum'vc.3" expl="postcondition" proved="true">
456 <proof prover="3"><result status="valid" time="0.040000" steps="104"/></proof>
457 <proof prover="6"><result status="valid" time="0.140000" steps="19800"/></proof>
459 <goal name="enum'vc.4" expl="postcondition" proved="true">
460 <proof prover="3"><result status="valid" time="0.020000" steps="17"/></proof>
461 <proof prover="6"><result status="valid" time="0.080000" steps="17857"/></proof>
463 <goal name="enum'vc.5" expl="postcondition" proved="true">
464 <proof prover="3"><result status="valid" time="0.060000" steps="785"/></proof>
466 <goal name="enum'vc.6" expl="variant decrease" proved="true">
467 <proof prover="3"><result status="valid" time="0.050000" steps="411"/></proof>
468 <proof prover="6"><result status="valid" time="0.110000" steps="17530"/></proof>
470 <goal name="enum'vc.7" expl="precondition" proved="true">
471 <proof prover="3"><result status="valid" time="0.020000" steps="30"/></proof>
472 <proof prover="6"><result status="valid" time="0.080000" steps="15433"/></proof>
474 <goal name="enum'vc.8" expl="precondition" proved="true">
475 <proof prover="3"><result status="valid" time="0.020000" steps="30"/></proof>
476 <proof prover="6"><result status="valid" time="0.080000" steps="15446"/></proof>
478 <goal name="enum'vc.9" expl="precondition" proved="true">
479 <proof prover="3"><result status="valid" time="0.030000" steps="78"/></proof>
480 <proof prover="6"><result status="valid" time="0.100000" steps="16159"/></proof>
482 <goal name="enum'vc.10" expl="precondition" proved="true">
483 <proof prover="3"><result status="valid" time="0.030000" steps="43"/></proof>
484 <proof prover="6"><result status="valid" time="0.100000" steps="16128"/></proof>
486 <goal name="enum'vc.11" expl="precondition" proved="true">
487 <proof prover="3"><result status="valid" time="0.020000" steps="46"/></proof>
488 <proof prover="6"><result status="valid" time="0.110000" steps="16176"/></proof>
490 <goal name="enum'vc.12" expl="precondition" proved="true">
491 <proof prover="3"><result status="valid" time="0.010000" steps="30"/></proof>
492 <proof prover="6"><result status="valid" time="0.080000" steps="15572"/></proof>
494 <goal name="enum'vc.13" expl="postcondition" proved="true">
495 <proof prover="3"><result status="valid" time="0.030000" steps="58"/></proof>
496 <proof prover="6"><result status="valid" time="0.120000" steps="18096"/></proof>
498 <goal name="enum'vc.14" expl="postcondition" proved="true">
499 <proof prover="3"><result status="valid" time="0.040000" steps="306"/></proof>
500 <proof prover="6"><result status="valid" time="0.120000" steps="18301"/></proof>
502 <goal name="enum'vc.15" expl="postcondition" proved="true">
503 <proof prover="3"><result status="valid" time="0.020000" steps="36"/></proof>
504 <proof prover="6"><result status="valid" time="0.080000" steps="15544"/></proof>
506 <goal name="enum'vc.16" expl="postcondition" proved="true">
507 <proof prover="3"><result status="valid" time="0.501783" steps="17448"/></proof>
509 <goal name="enum'vc.17" expl="assertion" proved="true">
510 <proof prover="3"><result status="valid" time="0.107344" steps="4256"/></proof>
511 <proof prover="6"><result status="valid" time="0.200000" steps="30374"/></proof>
513 <goal name="enum'vc.18" expl="assertion" proved="true">
514 <proof prover="3"><result status="valid" time="0.108005" steps="4169"/></proof>
515 <proof prover="6"><result status="valid" time="0.220000" steps="30239"/></proof>
517 <goal name="enum'vc.19" expl="index in array bounds" proved="true">
518 <proof prover="5"><result status="valid" time="0.480000"/></proof>
520 <goal name="enum'vc.20" expl="variant decrease" proved="true">
521 <proof prover="3"><result status="valid" time="0.060000" steps="1016"/></proof>
522 <proof prover="6"><result status="valid" time="0.150000" steps="22053"/></proof>
524 <goal name="enum'vc.21" expl="precondition" proved="true">
525 <proof prover="3"><result status="valid" time="0.020000" steps="34"/></proof>
526 <proof prover="6"><result status="valid" time="0.070000" steps="15507"/></proof>
528 <goal name="enum'vc.22" expl="precondition" proved="true">
529 <proof prover="3"><result status="valid" time="0.020000" steps="34"/></proof>
530 <proof prover="6"><result status="valid" time="0.080000" steps="15524"/></proof>
532 <goal name="enum'vc.23" expl="precondition" proved="true">
533 <proof prover="3"><result status="valid" time="0.030000" steps="54"/></proof>
534 <proof prover="6"><result status="valid" time="0.110000" steps="16222"/></proof>
536 <goal name="enum'vc.24" expl="precondition" proved="true">
537 <proof prover="3"><result status="valid" time="0.020000" steps="14"/></proof>
538 <proof prover="6"><result status="valid" time="0.080000" steps="14303"/></proof>
540 <goal name="enum'vc.25" expl="precondition" proved="true">
541 <proof prover="3"><result status="valid" time="0.080000" steps="1365"/></proof>
542 <proof prover="6"><result status="valid" time="0.130000" steps="17982"/></proof>
544 <goal name="enum'vc.26" expl="precondition" proved="true">
545 <proof prover="3"><result status="valid" time="0.020000" steps="34"/></proof>
546 <proof prover="6"><result status="valid" time="0.080000" steps="15621"/></proof>
548 <goal name="enum'vc.27" expl="assertion" proved="true">
549 <proof prover="3"><result status="valid" time="0.275794" steps="11019"/></proof>
550 <proof prover="6"><result status="valid" time="0.260000" steps="36614"/></proof>
552 <goal name="enum'vc.28" expl="index in array bounds" proved="true">
553 <proof prover="5"><result status="valid" time="0.500000"/></proof>
555 <goal name="enum'vc.29" expl="assertion" proved="true">
556 <proof prover="3"><result status="valid" time="0.237250" steps="9975"/></proof>
557 <proof prover="6"><result status="valid" time="0.360000" steps="52303"/></proof>
559 <goal name="enum'vc.30" expl="assertion" proved="true">
560 <proof prover="5"><result status="valid" time="0.180000"/></proof>
561 <proof prover="6"><result status="valid" time="0.580000" steps="71352"/></proof>
563 <goal name="enum'vc.31" expl="assertion" proved="true">
564 <proof prover="3"><result status="valid" time="0.239148" steps="6305"/></proof>
565 <proof prover="6"><result status="valid" time="0.140000" steps="20346"/></proof>
567 <goal name="enum'vc.32" expl="assertion" proved="true">
568 <proof prover="3"><result status="valid" time="0.040000" steps="85"/></proof>
569 <proof prover="6"><result status="valid" time="0.110000" steps="17721"/></proof>
571 <goal name="enum'vc.33" expl="variant decrease" proved="true">
572 <proof prover="3"><result status="valid" time="0.050000" steps="365"/></proof>
573 <proof prover="6"><result status="valid" time="0.130000" steps="20718"/></proof>
575 <goal name="enum'vc.34" expl="precondition" proved="true">
576 <proof prover="3"><result status="valid" time="0.020000" steps="44"/></proof>
577 <proof prover="6"><result status="valid" time="0.100000" steps="17767"/></proof>
579 <goal name="enum'vc.35" expl="precondition" proved="true">
580 <proof prover="3"><result status="valid" time="0.020000" steps="44"/></proof>
581 <proof prover="6"><result status="valid" time="0.090000" steps="17841"/></proof>
583 <goal name="enum'vc.36" expl="precondition" proved="true">
584 <proof prover="3"><result status="valid" time="0.040000" steps="93"/></proof>
585 <proof prover="6"><result status="valid" time="0.100000" steps="18222"/></proof>
587 <goal name="enum'vc.37" expl="precondition" proved="true">
588 <proof prover="3"><result status="valid" time="0.020000" steps="14"/></proof>
589 <proof prover="6"><result status="valid" time="0.070000" steps="14303"/></proof>
591 <goal name="enum'vc.38" expl="precondition" proved="true">
592 <proof prover="3"><result status="valid" time="0.160000" steps="2118"/></proof>
593 <proof prover="6"><result status="valid" time="0.140000" steps="21127"/></proof>
595 <goal name="enum'vc.39" expl="precondition" proved="true">
596 <proof prover="3"><result status="valid" time="0.040000" steps="99"/></proof>
597 <proof prover="6"><result status="valid" time="0.120000" steps="20814"/></proof>
599 <goal name="enum'vc.40" expl="assertion" proved="true">
600 <proof prover="3"><result status="valid" time="0.730939" steps="11878"/></proof>
601 <proof prover="6"><result status="valid" time="0.150000" steps="22474"/></proof>
603 <goal name="enum'vc.41" expl="assertion" proved="true">
604 <proof prover="3"><result status="valid" time="0.040000" steps="104"/></proof>
605 <proof prover="6"><result status="valid" time="0.100000" steps="18853"/></proof>
607 <goal name="enum'vc.42" expl="assertion" proved="true">
608 <proof prover="6"><result status="valid" time="0.160000" steps="24126"/></proof>
610 <goal name="enum'vc.43" expl="precondition" proved="true">
611 <proof prover="3"><result status="valid" time="0.020000" steps="72"/></proof>
612 <proof prover="6"><result status="valid" time="0.100000" steps="19420"/></proof>
614 <goal name="enum'vc.44" expl="precondition" proved="true">
615 <proof prover="5"><result status="valid" time="0.620000"/></proof>
617 <goal name="enum'vc.45" expl="precondition" proved="true">
618 <proof prover="3"><result status="valid" time="0.569241" steps="14186"/></proof>
619 <proof prover="6"><result status="valid" time="0.280000" steps="40813"/></proof>
621 <goal name="enum'vc.46" expl="precondition" proved="true">
622 <proof prover="3"><result status="valid" time="0.508180" steps="12104"/></proof>
623 <proof prover="6"><result status="valid" time="0.220000" steps="32924"/></proof>
625 <goal name="enum'vc.47" expl="precondition" proved="true">
626 <proof prover="3"><result status="valid" time="0.606703" steps="13922"/></proof>
627 <proof prover="6"><result status="valid" time="0.220000" steps="33197"/></proof>
629 <goal name="enum'vc.48" expl="precondition" proved="true">
630 <proof prover="3"><result status="valid" time="0.020000" steps="72"/></proof>
631 <proof prover="6"><result status="valid" time="0.090000" steps="17155"/></proof>
633 <goal name="enum'vc.49" expl="precondition" proved="true">
634 <proof prover="3"><result status="valid" time="0.020000" steps="72"/></proof>
635 <proof prover="6"><result status="valid" time="0.090000" steps="16449"/></proof>
637 <goal name="enum'vc.50" expl="postcondition" proved="true">
638 <proof prover="3"><result status="valid" time="2.690039" steps="84428"/></proof>
639 <proof prover="6"><result status="valid" time="0.915018" steps="86082"/></proof>
641 <goal name="enum'vc.51" expl="postcondition" proved="true">
642 <proof prover="6"><result status="valid" time="0.740000" steps="66790"/></proof>
644 <goal name="enum'vc.52" expl="postcondition" proved="true">
645 <proof prover="3"><result status="valid" time="0.020000" steps="72"/></proof>
646 <proof prover="6"><result status="valid" time="0.070000" steps="16345"/></proof>
648 <goal name="enum'vc.53" expl="postcondition" proved="true">
649 <proof prover="3"><result status="valid" time="0.020000" steps="72"/></proof>
650 <proof prover="6"><result status="valid" time="0.080000" steps="19032"/></proof>
652 <goal name="enum'vc.54" expl="assertion" proved="true">
653 <proof prover="3"><result status="valid" time="0.100000" steps="1712"/></proof>
654 <proof prover="6"><result status="valid" time="0.120000" steps="17673"/></proof>
656 <goal name="enum'vc.55" expl="variant decrease" proved="true">
657 <proof prover="3"><result status="valid" time="0.050000" steps="322"/></proof>
658 <proof prover="6"><result status="valid" time="0.120000" steps="18482"/></proof>
660 <goal name="enum'vc.56" expl="precondition" proved="true">
661 <proof prover="3"><result status="valid" time="0.020000" steps="34"/></proof>
662 <proof prover="6"><result status="valid" time="0.080000" steps="15584"/></proof>
664 <goal name="enum'vc.57" expl="precondition" proved="true">
665 <proof prover="3"><result status="valid" time="0.020000" steps="34"/></proof>
666 <proof prover="6"><result status="valid" time="0.070000" steps="15601"/></proof>
668 <goal name="enum'vc.58" expl="precondition" proved="true">
669 <proof prover="3"><result status="valid" time="0.040000" steps="297"/></proof>
670 <proof prover="6"><result status="valid" time="0.110000" steps="17920"/></proof>
672 <goal name="enum'vc.59" expl="precondition" proved="true">
673 <proof prover="3"><result status="valid" time="0.020000" steps="14"/></proof>
674 <proof prover="6"><result status="valid" time="0.070000" steps="14303"/></proof>
676 <goal name="enum'vc.60" expl="precondition" proved="true">
677 <proof prover="3"><result status="valid" time="0.170000" steps="2047"/></proof>
678 <proof prover="6"><result status="valid" time="0.130000" steps="18637"/></proof>
680 <goal name="enum'vc.61" expl="precondition" proved="true">
681 <proof prover="3"><result status="valid" time="0.020000" steps="34"/></proof>
682 <proof prover="6"><result status="valid" time="0.080000" steps="15709"/></proof>
684 <goal name="enum'vc.62" expl="assertion" proved="true">
685 <proof prover="6"><result status="valid" time="0.300000" steps="41249"/></proof>
687 <goal name="enum'vc.63" expl="index in array bounds" proved="true">
688 <proof prover="5"><result status="valid" time="0.400000"/></proof>
689 <proof prover="6"><result status="valid" time="3.962274" steps="260082"/></proof>
691 <goal name="enum'vc.64" expl="assertion" proved="true">
692 <proof prover="3"><result status="valid" time="0.473888" steps="13033"/></proof>
693 <proof prover="6"><result status="valid" time="0.170000" steps="28441"/></proof>
695 <goal name="enum'vc.65" expl="assertion" proved="true">
696 <proof prover="3"><result status="valid" time="0.040000" steps="88"/></proof>
697 <proof prover="6"><result status="valid" time="0.100000" steps="17704"/></proof>
699 <goal name="enum'vc.66" expl="assertion" proved="true">
700 <proof prover="3"><result status="valid" time="0.355536" steps="10128"/></proof>
701 <proof prover="6"><result status="valid" time="0.280000" steps="40941"/></proof>
703 <goal name="enum'vc.67" expl="assertion" proved="true">
704 <proof prover="3"><result status="valid" time="1.752637" steps="53899"/></proof>
705 <proof prover="6"><result status="valid" time="0.730000" steps="72875"/></proof>
707 <goal name="enum'vc.68" expl="variant decrease" proved="true">
708 <proof prover="3"><result status="valid" time="0.090985" steps="2742"/></proof>
709 <proof prover="6"><result status="valid" time="0.180000" steps="27882"/></proof>
711 <goal name="enum'vc.69" expl="precondition" proved="true">
712 <proof prover="3"><result status="valid" time="0.020000" steps="46"/></proof>
713 <proof prover="6"><result status="valid" time="0.110000" steps="18055"/></proof>
715 <goal name="enum'vc.70" expl="precondition" proved="true">
716 <proof prover="3"><result status="valid" time="0.020000" steps="46"/></proof>
717 <proof prover="6"><result status="valid" time="0.100000" steps="18129"/></proof>
719 <goal name="enum'vc.71" expl="precondition" proved="true">
720 <proof prover="3"><result status="valid" time="0.040000" steps="101"/></proof>
721 <proof prover="6"><result status="valid" time="0.100000" steps="18238"/></proof>
723 <goal name="enum'vc.72" expl="precondition" proved="true">
724 <proof prover="3"><result status="valid" time="0.020000" steps="14"/></proof>
725 <proof prover="6"><result status="valid" time="0.070000" steps="14500"/></proof>
727 <goal name="enum'vc.73" expl="precondition" proved="true">
728 <proof prover="3"><result status="valid" time="0.527075" steps="12131"/></proof>
729 <proof prover="6"><result status="valid" time="0.220000" steps="32411"/></proof>
731 <goal name="enum'vc.74" expl="precondition" proved="true">
732 <proof prover="3"><result status="valid" time="0.229607" steps="4540"/></proof>
733 <proof prover="6"><result status="valid" time="0.150000" steps="22488"/></proof>
735 <goal name="enum'vc.75" expl="assertion" proved="true">
736 <proof prover="3"><result status="valid" time="0.125821" steps="2929"/></proof>
737 <proof prover="6"><result status="valid" time="0.150000" steps="23109"/></proof>
739 <goal name="enum'vc.76" expl="assertion" proved="true">
740 <proof prover="6"><result status="valid" time="2.538846" steps="160966"/></proof>
742 <goal name="enum'vc.77" expl="precondition" proved="true">
743 <proof prover="3"><result status="valid" time="0.020000" steps="70"/></proof>
744 <proof prover="6"><result status="valid" time="0.110000" steps="19276"/></proof>
746 <goal name="enum'vc.78" expl="precondition" proved="true">
747 <proof prover="5"><result status="valid" time="0.680000"/></proof>
749 <goal name="enum'vc.79" expl="precondition" proved="true">
750 <proof prover="3"><result status="valid" time="0.603513" steps="15839"/></proof>
751 <proof prover="6"><result status="valid" time="0.220000" steps="36119"/></proof>
753 <goal name="enum'vc.80" expl="precondition" proved="true">
754 <proof prover="6"><result status="valid" time="0.210000" steps="31792"/></proof>
756 <goal name="enum'vc.81" expl="precondition" proved="true">
757 <proof prover="3"><result status="valid" time="0.668203" steps="14299"/></proof>
758 <proof prover="6"><result status="valid" time="0.230000" steps="32181"/></proof>
760 <goal name="enum'vc.82" expl="precondition" proved="true">
761 <proof prover="3"><result status="valid" time="0.020000" steps="70"/></proof>
762 <proof prover="6"><result status="valid" time="0.090000" steps="17077"/></proof>
764 <goal name="enum'vc.83" expl="precondition" proved="true">
765 <proof prover="3"><result status="valid" time="0.030000" steps="70"/></proof>
766 <proof prover="6"><result status="valid" time="0.090000" steps="16453"/></proof>
768 <goal name="enum'vc.84" expl="postcondition" proved="true">
769 <proof prover="6"><result status="valid" time="0.220000" steps="35433"/></proof>
771 <goal name="enum'vc.85" expl="postcondition" proved="true">
772 <proof prover="6"><result status="valid" time="0.668277" steps="62457"/></proof>
774 <goal name="enum'vc.86" expl="postcondition" proved="true">
775 <proof prover="3"><result status="valid" time="0.020000" steps="70"/></proof>
776 <proof prover="6"><result status="valid" time="0.080000" steps="16349"/></proof>
778 <goal name="enum'vc.87" expl="postcondition" proved="true">
779 <proof prover="3"><result status="valid" time="0.020000" steps="70"/></proof>
780 <proof prover="6"><result status="valid" time="0.080000" steps="18892"/></proof>
784 <goal name="main'vc" expl="VC for main" proved="true">
785 <proof prover="3"><result status="valid" time="0.060000" steps="230"/></proof>