<check_ce:categorization>Categorizations of models:
- Checked model 0: INCOMPLETE
  - Concrete RAC: INCOMPLETE (terminated because missing value for return value of call at "WHY3DATA/stdlib/mach/int.mlw", line 432, character 22 to line 433, character 45)
  - Abstract RAC: INCOMPLETE (terminated because missing value for return value of call at "WHY3DATA/stdlib/mach/int.mlw", line 432, character 22 to line 433, character 45)
- Selected model 1: INCOMPLETE
  - Concrete RAC: INCOMPLETE (terminated because missing value for return value of call at "WHY3DATA/stdlib/mach/int.mlw", line 432, character 22 to line 433, character 45)
  - Abstract RAC: INCOMPLETE (terminated because missing value for return value of call at "WHY3DATA/stdlib/mach/int.mlw", line 432, character 22 to line 433, character 45)
File "bench/check-ce/tuple1.mlw", line 7, characters 14-19:
Sub-goal Integer overflow of goal swap'vc.
Prover result is: Unknown (unknown + incomplete) (2681 steps).
The following counterexample model could not be verified
  (both RAC terminated because missing value for return value of call at "WHY3DATA/stdlib/mach/int.mlw", line 432, character 22 to line 433, character 45):
File int.mlw:
  Line 416:
    int63'int :
      int63
      ->
      int = fun bOUND_VARIABLE_4561 ->
             if {mach.int.Int63.int63'int => -4611686018427387903} = bOUND_VARIABLE_4561
             then -4611686018427387903
             else if {mach.int.Int63.int63'int => -4611686018427387904} = bOUND_VARIABLE_4561
                  then -4611686018427387904
                  else if {mach.int.Int63.int63'int => 4611686018427387903} = bOUND_VARIABLE_4561
                       then 4611686018427387903 else -4611686018427387902
  Line 432:
    max_int : int63 = {mach.int.Int63.int63'int => 4611686018427387903}
  Line 434:
    min_int : int63 = {mach.int.Int63.int63'int => -4611686018427387904}
File tuple1.mlw:
  Line 6:
    a : int63 = {mach.int.Int63.int63'int => -4611686018427387903}
    b : int63 = {mach.int.Int63.int63'int => -4611686018427387902}
  Line 7:
    a : int63 = {mach.int.Int63.int63'int => -4611686018427387903}
    b : int63 = {mach.int.Int63.int63'int => -4611686018427387902}

File "bench/check-ce/tuple1.mlw", line 7, characters 14-23:
Sub-goal Integer overflow of goal swap'vc.
Prover result is: Valid (1709 steps).

File "bench/check-ce/tuple1.mlw", line 7, characters 3-8:
Sub-goal Integer overflow of goal swap'vc.
Prover result is: Valid (1793 steps).

File "bench/check-ce/tuple1.mlw", line 7, characters 3-12:
Sub-goal Integer overflow of goal swap'vc.
Prover result is: Valid (1869 steps).

File "bench/check-ce/tuple1.mlw", line 5, characters 38-43:
Sub-goal Postcondition of goal swap'vc.
Prover result is: Valid (3271 steps).

