<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE why3session PUBLIC "-//Why3//proof session v5//EN"
"http://why3.lri.fr/why3session.dtd">
<why3session shape_version="6">
<prover id="0" name="Alt-Ergo" version="2.0.0" timelimit="5" steplimit="0" memlimit="1000"/>
<prover id="1" name="CVC5" version="1.0.5" timelimit="5" steplimit="0" memlimit="1000"/>
<prover id="6" name="Alt-Ergo" version="2.3.3" timelimit="5" steplimit="0" memlimit="1000"/>
<file format="whyml" proved="true">
<path name=".."/><path name="verifythis_2018_array_based_queuing_lock_2.mlw"/>
<theory name="ABQL" proved="true">
 <goal name="tick&#39;vc" expl="VC for tick" proved="true">
 <proof prover="6"><result status="valid" time="0.000000" steps="6"/></proof>
 </goal>
 <goal name="fetch_and_add&#39;vc" expl="VC for fetch_and_add" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="fetch_and_add&#39;vc.0" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="fetch_and_add&#39;vc.0.0" expl="assertion" proved="true">
   <transf name="subst" proved="true" arg1="a">
    <goal name="fetch_and_add&#39;vc.0.0.0" expl="assertion" proved="true">
    <transf name="apply" proved="true" arg1="Div_mod">
     <goal name="fetch_and_add&#39;vc.0.0.0.0" expl="apply premises" proved="true">
     <proof prover="6"><result status="valid" time="0.000000" steps="4"/></proof>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="fetch_and_add&#39;vc.0.1" expl="VC for fetch_and_add" proved="true">
   <proof prover="6"><result status="valid" time="0.010000" steps="8"/></proof>
   </goal>
   <goal name="fetch_and_add&#39;vc.0.2" expl="VC for fetch_and_add" proved="true">
   <proof prover="6"><result status="valid" time="0.000000" steps="8"/></proof>
   </goal>
   <goal name="fetch_and_add&#39;vc.0.3" expl="VC for fetch_and_add" proved="true">
   <proof prover="6"><result status="valid" time="0.010000" steps="10"/></proof>
   </goal>
   <goal name="fetch_and_add&#39;vc.0.4" expl="VC for fetch_and_add" proved="true">
   <proof prover="6"><result status="valid" time="0.000000" steps="13"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="fetch_and_add&#39;vc.1" expl="precondition" proved="true">
  <proof prover="6"><result status="valid" time="0.000000" steps="6"/></proof>
  </goal>
  <goal name="fetch_and_add&#39;vc.2" expl="precondition" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="42"/></proof>
  </goal>
  <goal name="fetch_and_add&#39;vc.3" expl="postcondition" proved="true">
  <proof prover="6"><result status="valid" time="0.000000" steps="10"/></proof>
  </goal>
  <goal name="fetch_and_add&#39;vc.4" expl="postcondition" proved="true">
  <proof prover="6"><result status="valid" time="0.000000" steps="10"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="last_push&#39;vc" expl="VC for last_push" proved="true">
 <proof prover="6"><result status="valid" time="0.020000" steps="65"/></proof>
 </goal>
 <goal name="consecutive_last_push&#39;vc" expl="VC for consecutive_last_push" proved="true">
 <proof prover="6"><result status="valid" time="0.100000" steps="442"/></proof>
 </goal>
 <goal name="hd_push" proved="true">
 <proof prover="6"><result status="valid" time="0.020000" steps="134"/></proof>
 </goal>
 <goal name="consecutive_implies_sorted&#39;vc" expl="VC for consecutive_implies_sorted" proved="true">
 <proof prover="6"><result status="valid" time="0.030000" steps="78"/></proof>
 </goal>
 <goal name="numof_equiv&#39;vc" expl="VC for numof_equiv" proved="true">
 <proof prover="6"><result status="valid" time="0.380000" steps="308"/></proof>
 </goal>
 <goal name="numof_add&#39;vc" expl="VC for numof_add" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="numof_add&#39;vc.0" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.150000" steps="447"/></proof>
  </goal>
  <goal name="numof_add&#39;vc.1" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="3.492712" steps="2557"/></proof>
  </goal>
  <goal name="numof_add&#39;vc.2" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.400000" steps="1169"/></proof>
  </goal>
  <goal name="numof_add&#39;vc.3" expl="postcondition" proved="true">
  <proof prover="1"><result status="valid" time="3.699754" steps="309243"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="mod_diff" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="mod_diff.0" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="14"/></proof>
  </goal>
  <goal name="mod_diff.1" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="16"/></proof>
  </goal>
  <goal name="mod_diff.2" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="16"/></proof>
  </goal>
  <goal name="mod_diff.3" proved="true">
  <proof prover="0"><result status="valid" time="0.020000" steps="11"/></proof>
  <transf name="remove" proved="true" arg1="zero1,one1,(-),(&gt;),(&lt;=),(&gt;=),abs,get1,set1,([]&#39;&#39;),([&lt;-]&#39;&#39;),(!),is_none,([]&#39;),numof,([]),singleton,cons,snoc,(++),mem,lt,sorted,consecutive,last,hd,has_ticket,has_lock,Assoc1,Unit_def_l,Unit_def_r,Inv_def_l,Inv_def_r,Comm1,Assoc,Mul_distr_l,Mul_distr_r,Comm,Unitary,NonTrivialRing,Refl,Trans,Antisymm,Total,ZeroLessOne,CompatOrderAdd,CompatOrderMult,Abs_le,Abs_pos,Div_mod,Mod_bound,Div_unique,Div_bound,Mod_1,Div_1,Div_inf,Div_inf_neg,Mod_0,Div_1_left,Div_minus1_left,Mod_1_left,Mod_minus1_left,Div_mult,numof&#39;def,Numof_bounds,Numof_append,Numof_left_no_add,Numof_left_add,Empty,Full,numof_increasing,numof_strictly_increasing,numof_change_any,numof_change_some,numof_change_equiv,is_none&#39;spec,array&#39;invariant,([&lt;-])&#39;spec,make_spec,length_nonnegative,(==)&#39;spec,create&#39;spec,empty&#39;def,set&#39;spec,set&#39;def,([&lt;-])&#39;def,singleton&#39;spec,cons&#39;spec,snoc&#39;spec,([..])&#39;spec,([..])&#39;def,([_..])&#39;def,([.._])&#39;def,(++)&#39;spec,associative,left_neutral,right_neutral,cons_def,snoc_def,double_sub_sequence,cons_back,snoc_back,cat_back,cons_dec,snoc_dec,cat_dec,empty_dec,singleton_dec,mem_append,mem_tail,N_val,K_val,tick&#39;invariant,last_push,consecutive_last_push,hd_push,consecutive_implies_sorted,zero&#39;def,one&#39;def,numof_equiv,numof_add,H3,H2,H1">
   <goal name="mod_diff.3.0" proved="true">
   <proof prover="0"><result status="valid" time="0.000000" steps="4"/></proof>
   <proof prover="6"><result status="valid" time="0.000000" steps="6"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="mod_diff.4" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="19"/></proof>
  </goal>
  <goal name="mod_diff.5" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="21"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="main&#39;vc" expl="VC for main" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="main&#39;vc.0" expl="array creation size" proved="true">
  <proof prover="6"><result status="valid" time="0.010000" steps="8"/></proof>
  </goal>
  <goal name="main&#39;vc.1" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.010000" steps="10"/></proof>
  </goal>
  <goal name="main&#39;vc.2" expl="precondition" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="18"/></proof>
  </goal>
  <goal name="main&#39;vc.3" expl="array creation size" proved="true">
  <proof prover="6"><result status="valid" time="0.010000" steps="20"/></proof>
  </goal>
  <goal name="main&#39;vc.4" expl="array creation size" proved="true">
  <proof prover="6"><result status="valid" time="0.010000" steps="22"/></proof>
  </goal>
  <goal name="main&#39;vc.5" expl="array creation size" proved="true">
  <proof prover="6"><result status="valid" time="0.010000" steps="24"/></proof>
  </goal>
  <goal name="main&#39;vc.6" expl="safety" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="36"/></proof>
  </goal>
  <goal name="main&#39;vc.7" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="28"/></proof>
  </goal>
  <goal name="main&#39;vc.8" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="70"/></proof>
  </goal>
  <goal name="main&#39;vc.9" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="32"/></proof>
  </goal>
  <goal name="main&#39;vc.10" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.010000" steps="30"/></proof>
  </goal>
  <goal name="main&#39;vc.11" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="78"/></proof>
  </goal>
  <goal name="main&#39;vc.12" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="31"/></proof>
  </goal>
  <goal name="main&#39;vc.13" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="89"/></proof>
  </goal>
  <goal name="main&#39;vc.14" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="37"/></proof>
  </goal>
  <goal name="main&#39;vc.15" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="81"/></proof>
  </goal>
  <goal name="main&#39;vc.16" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="72"/></proof>
  </goal>
  <goal name="main&#39;vc.17" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="74"/></proof>
  </goal>
  <goal name="main&#39;vc.18" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="53"/></proof>
  </goal>
  <goal name="main&#39;vc.19" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.440000" steps="217"/></proof>
  </goal>
  <goal name="main&#39;vc.20" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="78"/></proof>
  </goal>
  <goal name="main&#39;vc.21" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="83"/></proof>
  </goal>
  <goal name="main&#39;vc.22" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="86"/></proof>
  </goal>
  <goal name="main&#39;vc.23" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="35"/></proof>
  </goal>
  <goal name="main&#39;vc.24" expl="loop invariant init" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="56"/></proof>
  </goal>
  <goal name="main&#39;vc.25" expl="liveness" proved="true">
  <transf name="split_all_full" proved="true" >
   <goal name="main&#39;vc.25.0" expl="liveness" proved="true">
   <proof prover="1"><result status="valid" time="2.206660" steps="209730"/></proof>
   </goal>
   <goal name="main&#39;vc.25.1" expl="liveness" proved="true">
   <proof prover="6"><result status="valid" time="0.020000" steps="39"/></proof>
   </goal>
   <goal name="main&#39;vc.25.2" expl="liveness" proved="true">
   <proof prover="6"><result status="valid" time="0.020000" steps="43"/></proof>
   </goal>
   <goal name="main&#39;vc.25.3" expl="liveness" proved="true">
   <proof prover="6"><result status="valid" time="0.020000" steps="39"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.26" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="52"/></proof>
  </goal>
  <goal name="main&#39;vc.27" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="54"/></proof>
  </goal>
  <goal name="main&#39;vc.28" expl="safety" proved="true">
  <proof prover="6"><result status="valid" time="0.190000" steps="511"/></proof>
  </goal>
  <goal name="main&#39;vc.29" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="60"/></proof>
  </goal>
  <goal name="main&#39;vc.30" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.200000" steps="500"/></proof>
  </goal>
  <goal name="main&#39;vc.31" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.070000" steps="224"/></proof>
  </goal>
  <goal name="main&#39;vc.32" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.280000" steps="1155"/></proof>
  </goal>
  <goal name="main&#39;vc.33" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="84"/></proof>
  </goal>
  <goal name="main&#39;vc.34" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.080000" steps="256"/></proof>
  </goal>
  <goal name="main&#39;vc.35" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="202"/></proof>
  </goal>
  <goal name="main&#39;vc.36" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.350000" steps="1115"/></proof>
  </goal>
  <goal name="main&#39;vc.37" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.330000" steps="1215"/></proof>
  </goal>
  <goal name="main&#39;vc.38" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="161"/></proof>
  </goal>
  <goal name="main&#39;vc.39" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="1.220000" steps="1470"/></proof>
  </goal>
  <goal name="main&#39;vc.40" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="60"/></proof>
  </goal>
  <goal name="main&#39;vc.41" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.600000" steps="1119"/></proof>
  </goal>
  <goal name="main&#39;vc.42" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="69"/></proof>
  </goal>
  <goal name="main&#39;vc.43" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="70"/></proof>
  </goal>
  <goal name="main&#39;vc.44" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="70"/></proof>
  </goal>
  <goal name="main&#39;vc.45" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.090000" steps="246"/></proof>
  </goal>
  <goal name="main&#39;vc.46" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="62"/></proof>
  </goal>
  <goal name="main&#39;vc.47" expl="liveness" proved="true">
  <proof prover="6"><result status="valid" time="0.070000" steps="176"/></proof>
  </goal>
  <goal name="main&#39;vc.48" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.48.0" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="58"/></proof>
   </goal>
   <goal name="main&#39;vc.48.1" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.020000" steps="58"/></proof>
   </goal>
   <goal name="main&#39;vc.48.2" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="72"/></proof>
   </goal>
   <goal name="main&#39;vc.48.3" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="77"/></proof>
   </goal>
   <goal name="main&#39;vc.48.4" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="77"/></proof>
   </goal>
   <goal name="main&#39;vc.48.5" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="1.170000" steps="704"/></proof>
   </goal>
   <goal name="main&#39;vc.48.6" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="83"/></proof>
   </goal>
   <goal name="main&#39;vc.48.7" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="85"/></proof>
   </goal>
   <goal name="main&#39;vc.48.8" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.130000" steps="279"/></proof>
   </goal>
   <goal name="main&#39;vc.48.9" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.500000" steps="714"/></proof>
   </goal>
   <goal name="main&#39;vc.48.10" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="81"/></proof>
   </goal>
   <goal name="main&#39;vc.48.11" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.080000" steps="541"/></proof>
   </goal>
   <goal name="main&#39;vc.48.12" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="97"/></proof>
   </goal>
   <goal name="main&#39;vc.48.13" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.050000" steps="97"/></proof>
   </goal>
   <goal name="main&#39;vc.48.14" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.500000" steps="618"/></proof>
   </goal>
   <goal name="main&#39;vc.48.15" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="91"/></proof>
   </goal>
   <goal name="main&#39;vc.48.16" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.050000" steps="103"/></proof>
   </goal>
   <goal name="main&#39;vc.48.17" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.020000" steps="63"/></proof>
   </goal>
   <goal name="main&#39;vc.48.18" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.360000" steps="609"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.49" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.100000" steps="398"/></proof>
  </goal>
  <goal name="main&#39;vc.50" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="75"/></proof>
  </goal>
  <goal name="main&#39;vc.51" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="66"/></proof>
  </goal>
  <goal name="main&#39;vc.52" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="72"/></proof>
  </goal>
  <goal name="main&#39;vc.53" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.050000" steps="92"/></proof>
  </goal>
  <goal name="main&#39;vc.54" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="84"/></proof>
  </goal>
  <goal name="main&#39;vc.55" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.440000" steps="674"/></proof>
  </goal>
  <goal name="main&#39;vc.56" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.56.0" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.140000" steps="429"/></proof>
   </goal>
   <goal name="main&#39;vc.56.1" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.060000" steps="100"/></proof>
   </goal>
   <goal name="main&#39;vc.56.2" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.160000" steps="102"/></proof>
   </goal>
   <goal name="main&#39;vc.56.3" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.150000" steps="104"/></proof>
   </goal>
   <goal name="main&#39;vc.56.4" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.170000" steps="454"/></proof>
   </goal>
   <goal name="main&#39;vc.56.5" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.190000" steps="465"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.57" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.57.0" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.160000" steps="427"/></proof>
   </goal>
   <goal name="main&#39;vc.57.1" expl="assertion" proved="true">
   <transf name="rewrite" proved="true" arg1="H">
    <goal name="main&#39;vc.57.1.0" expl="assertion" proved="true">
    <transf name="apply" proved="true" arg1="consecutive_last_push">
     <goal name="main&#39;vc.57.1.0.0" expl="apply premises" proved="true">
     <proof prover="6"><result status="valid" time="0.030000" steps="86"/></proof>
     </goal>
     <goal name="main&#39;vc.57.1.0.1" expl="apply premises" proved="true">
     <proof prover="6"><result status="valid" time="0.050000" steps="102"/></proof>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.58" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.240000" steps="826"/></proof>
  </goal>
  <goal name="main&#39;vc.59" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.080000" steps="335"/></proof>
  </goal>
  <goal name="main&#39;vc.60" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.200000" steps="784"/></proof>
  </goal>
  <goal name="main&#39;vc.61" expl="safety" proved="true">
  <proof prover="6"><result status="valid" time="1.850000" steps="1646"/></proof>
  </goal>
  <goal name="main&#39;vc.62" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="86"/></proof>
  </goal>
  <goal name="main&#39;vc.63" expl="loop invariant preservation" proved="true">
  <transf name="case" proved="true" arg1="(b = tick.b1)">
   <goal name="main&#39;vc.63.0" expl="true case (loop invariant preservation)" proved="true">
   <proof prover="6"><result status="valid" time="0.250000" steps="699"/></proof>
   </goal>
   <goal name="main&#39;vc.63.1" expl="false case (loop invariant preservation)" proved="true">
   <transf name="replace" proved="true" arg1="owners[b]&#39;" arg2="owners1[b]&#39;">
    <goal name="main&#39;vc.63.1.0" expl="false case (loop invariant preservation)" proved="true">
    <proof prover="6"><result status="valid" time="1.390534" steps="2052"/></proof>
    </goal>
    <goal name="main&#39;vc.63.1.1" expl="equality hypothesis" proved="true">
    <proof prover="6"><result status="valid" time="0.060000" steps="106"/></proof>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.64" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.320000" steps="960"/></proof>
  </goal>
  <goal name="main&#39;vc.65" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.590000" steps="1933"/></proof>
  </goal>
  <goal name="main&#39;vc.66" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="112"/></proof>
  </goal>
  <goal name="main&#39;vc.67" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.200000" steps="617"/></proof>
  </goal>
  <goal name="main&#39;vc.68" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.910000" steps="1678"/></proof>
  </goal>
  <goal name="main&#39;vc.69" expl="loop invariant preservation" proved="true">
  <proof prover="1"><result status="valid" time="0.943739" steps="94053"/></proof>
  </goal>
  <goal name="main&#39;vc.70" expl="loop invariant preservation" proved="true">
  <transf name="split_all_full" proved="true" >
   <goal name="main&#39;vc.70.0" expl="VC for main" proved="true">
   <proof prover="6"><result status="valid" time="0.860000" steps="1418"/></proof>
   </goal>
   <goal name="main&#39;vc.70.1" expl="VC for main" proved="true">
   <proof prover="1"><result status="valid" time="4.857608" steps="448773"/></proof>
   </goal>
   <goal name="main&#39;vc.70.2" expl="VC for main" proved="true">
   <proof prover="1"><result status="valid" time="7.403644" steps="603640"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.71" expl="loop invariant preservation" proved="true">
  <transf name="case" proved="true" arg1="(th=th1)">
   <goal name="main&#39;vc.71.0" expl="true case (loop invariant preservation)" proved="true">
   <proof prover="6"><result status="valid" time="0.180000" steps="466"/></proof>
   </goal>
   <goal name="main&#39;vc.71.1" expl="false case (loop invariant preservation)" proved="true">
   <transf name="replace" proved="true" arg1="memo[th]&#39;" arg2="memo1[th]&#39;">
    <goal name="main&#39;vc.71.1.0" expl="false case (loop invariant preservation)" proved="true">
    <proof prover="6"><result status="valid" time="0.180000" steps="475"/></proof>
    </goal>
    <goal name="main&#39;vc.71.1.1" expl="equality hypothesis" proved="true">
    <proof prover="6"><result status="valid" time="0.070000" steps="100"/></proof>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.72" expl="loop invariant preservation" proved="true">
  <transf name="split_all_full" proved="true" >
   <goal name="main&#39;vc.72.0" expl="VC for main" proved="true">
   <proof prover="6"><result status="valid" time="0.200000" steps="546"/></proof>
   </goal>
   <goal name="main&#39;vc.72.1" expl="VC for main" proved="true">
   <proof prover="1"><result status="valid" time="0.572360" steps="67097"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.73" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="86"/></proof>
  </goal>
  <goal name="main&#39;vc.74" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="94"/></proof>
  </goal>
  <goal name="main&#39;vc.75" expl="loop invariant preservation" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.75.0" expl="loop invariant preservation" proved="true">
   <proof prover="6"><result status="valid" time="1.840000" steps="1730"/></proof>
   </goal>
   <goal name="main&#39;vc.75.1" expl="loop invariant preservation" proved="true">
   <proof prover="6"><result status="valid" time="3.590000" steps="1851"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.76" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.110000" steps="399"/></proof>
  </goal>
  <goal name="main&#39;vc.77" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.120000" steps="98"/></proof>
  </goal>
  <goal name="main&#39;vc.78" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.260000" steps="891"/></proof>
  </goal>
  <goal name="main&#39;vc.79" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.180000" steps="443"/></proof>
  </goal>
  <goal name="main&#39;vc.80" expl="liveness" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="97"/></proof>
  </goal>
  <goal name="main&#39;vc.81" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="54"/></proof>
  </goal>
  <goal name="main&#39;vc.82" expl="unreachable point" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="129"/></proof>
  </goal>
  <goal name="main&#39;vc.83" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="71"/></proof>
  </goal>
  <goal name="main&#39;vc.84" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.160000" steps="328"/></proof>
  </goal>
  <goal name="main&#39;vc.85" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="64"/></proof>
  </goal>
  <goal name="main&#39;vc.86" expl="precondition" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="144"/></proof>
  </goal>
  <goal name="main&#39;vc.87" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="165"/></proof>
  </goal>
  <goal name="main&#39;vc.88" expl="fairness" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.88.0" expl="fairness" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="78"/></proof>
   </goal>
   <goal name="main&#39;vc.88.1" expl="fairness" proved="true">
   <proof prover="6"><result status="valid" time="0.060000" steps="165"/></proof>
   </goal>
   <goal name="main&#39;vc.88.2" expl="fairness" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="82"/></proof>
   </goal>
   <goal name="main&#39;vc.88.3" expl="fairness" proved="true">
   <proof prover="6"><result status="valid" time="0.270000" steps="480"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.89" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.89.0" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.060000" steps="202"/></proof>
   </goal>
   <goal name="main&#39;vc.89.1" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="74"/></proof>
   </goal>
   <goal name="main&#39;vc.89.2" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="1.360000" steps="1054"/></proof>
   </goal>
   <goal name="main&#39;vc.89.3" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.080000" steps="156"/></proof>
   </goal>
   <goal name="main&#39;vc.89.4" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.280000" steps="432"/></proof>
   </goal>
   <goal name="main&#39;vc.89.5" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.100000" steps="372"/></proof>
   </goal>
   <goal name="main&#39;vc.89.6" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.120000" steps="390"/></proof>
   </goal>
   <goal name="main&#39;vc.89.7" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="197"/></proof>
   </goal>
   <goal name="main&#39;vc.89.8" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.300000" steps="532"/></proof>
   </goal>
   <goal name="main&#39;vc.89.9" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="76"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.90" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.90.0" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="80"/></proof>
   </goal>
   <goal name="main&#39;vc.90.1" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="80"/></proof>
   </goal>
   <goal name="main&#39;vc.90.2" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="84"/></proof>
   </goal>
   <goal name="main&#39;vc.90.3" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.050000" steps="83"/></proof>
   </goal>
   <goal name="main&#39;vc.90.4" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="87"/></proof>
   </goal>
   <goal name="main&#39;vc.90.5" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.280000" steps="783"/></proof>
   </goal>
   <goal name="main&#39;vc.90.6" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="92"/></proof>
   </goal>
   <goal name="main&#39;vc.90.7" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="94"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.91" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.970000" steps="1443"/></proof>
  </goal>
  <goal name="main&#39;vc.92" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.92.0" expl="assertion" proved="true">
   <proof prover="1"><result status="valid" time="0.432042" steps="45407"/></proof>
   </goal>
   <goal name="main&#39;vc.92.1" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.040000" steps="80"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.93" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.110000" steps="451"/></proof>
  </goal>
  <goal name="main&#39;vc.94" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="1.300000" steps="1468"/></proof>
  </goal>
  <goal name="main&#39;vc.95" expl="safety" proved="true">
  <proof prover="6"><result status="valid" time="0.420000" steps="597"/></proof>
  </goal>
  <goal name="main&#39;vc.96" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="76"/></proof>
  </goal>
  <goal name="main&#39;vc.97" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="1.900000" steps="813"/></proof>
  </goal>
  <goal name="main&#39;vc.98" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.740000" steps="1082"/></proof>
  </goal>
  <goal name="main&#39;vc.99" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.180000" steps="740"/></proof>
  </goal>
  <goal name="main&#39;vc.100" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.050000" steps="106"/></proof>
  </goal>
  <goal name="main&#39;vc.101" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.050000" steps="142"/></proof>
  </goal>
  <goal name="main&#39;vc.102" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.100000" steps="262"/></proof>
  </goal>
  <goal name="main&#39;vc.103" expl="loop invariant preservation" proved="true">
  <proof prover="1"><result status="valid" time="0.391659" steps="39473"/></proof>
  </goal>
  <goal name="main&#39;vc.104" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.120000" steps="400"/></proof>
  </goal>
  <goal name="main&#39;vc.105" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.120000" steps="395"/></proof>
  </goal>
  <goal name="main&#39;vc.106" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.700000" steps="1379"/></proof>
  </goal>
  <goal name="main&#39;vc.107" expl="loop invariant preservation" proved="true">
  <proof prover="1"><result status="valid" time="6.856608" steps="486576"/></proof>
  </goal>
  <goal name="main&#39;vc.108" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.240000" steps="849"/></proof>
  </goal>
  <goal name="main&#39;vc.109" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="178"/></proof>
  </goal>
  <goal name="main&#39;vc.110" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="3.120000" steps="2399"/></proof>
  </goal>
  <goal name="main&#39;vc.111" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.080000" steps="302"/></proof>
  </goal>
  <goal name="main&#39;vc.112" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.320000" steps="1346"/></proof>
  </goal>
  <goal name="main&#39;vc.113" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="110"/></proof>
  </goal>
  <goal name="main&#39;vc.114" expl="liveness" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="98"/></proof>
  </goal>
  <goal name="main&#39;vc.115" expl="safety" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="78"/></proof>
  </goal>
  <goal name="main&#39;vc.116" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="58"/></proof>
  </goal>
  <goal name="main&#39;vc.117" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.270000" steps="605"/></proof>
  </goal>
  <goal name="main&#39;vc.118" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.070000" steps="252"/></proof>
  </goal>
  <goal name="main&#39;vc.119" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.110000" steps="423"/></proof>
  </goal>
  <goal name="main&#39;vc.120" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="78"/></proof>
  </goal>
  <goal name="main&#39;vc.121" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="85"/></proof>
  </goal>
  <goal name="main&#39;vc.122" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="227"/></proof>
  </goal>
  <goal name="main&#39;vc.123" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="147"/></proof>
  </goal>
  <goal name="main&#39;vc.124" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.090000" steps="359"/></proof>
  </goal>
  <goal name="main&#39;vc.125" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="189"/></proof>
  </goal>
  <goal name="main&#39;vc.126" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.070000" steps="251"/></proof>
  </goal>
  <goal name="main&#39;vc.127" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="58"/></proof>
  </goal>
  <goal name="main&#39;vc.128" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="58"/></proof>
  </goal>
  <goal name="main&#39;vc.129" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="65"/></proof>
  </goal>
  <goal name="main&#39;vc.130" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="66"/></proof>
  </goal>
  <goal name="main&#39;vc.131" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="66"/></proof>
  </goal>
  <goal name="main&#39;vc.132" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.070000" steps="256"/></proof>
  </goal>
  <goal name="main&#39;vc.133" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="58"/></proof>
  </goal>
  <goal name="main&#39;vc.134" expl="liveness" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="206"/></proof>
  </goal>
  <goal name="main&#39;vc.135" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="54"/></proof>
  </goal>
  <goal name="main&#39;vc.136" expl="safety" proved="true">
  <proof prover="6"><result status="valid" time="0.170000" steps="325"/></proof>
  </goal>
  <goal name="main&#39;vc.137" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="60"/></proof>
  </goal>
  <goal name="main&#39;vc.138" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.220000" steps="572"/></proof>
  </goal>
  <goal name="main&#39;vc.139" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="224"/></proof>
  </goal>
  <goal name="main&#39;vc.140" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.100000" steps="307"/></proof>
  </goal>
  <goal name="main&#39;vc.141" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="84"/></proof>
  </goal>
  <goal name="main&#39;vc.142" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.080000" steps="256"/></proof>
  </goal>
  <goal name="main&#39;vc.143" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="202"/></proof>
  </goal>
  <goal name="main&#39;vc.144" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.529797" steps="1664"/></proof>
  </goal>
  <goal name="main&#39;vc.145" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.240000" steps="731"/></proof>
  </goal>
  <goal name="main&#39;vc.146" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="161"/></proof>
  </goal>
  <goal name="main&#39;vc.147" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="1.080000" steps="1465"/></proof>
  </goal>
  <goal name="main&#39;vc.148" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="60"/></proof>
  </goal>
  <goal name="main&#39;vc.149" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.681245" steps="1618"/></proof>
  </goal>
  <goal name="main&#39;vc.150" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="69"/></proof>
  </goal>
  <goal name="main&#39;vc.151" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="70"/></proof>
  </goal>
  <goal name="main&#39;vc.152" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="70"/></proof>
  </goal>
  <goal name="main&#39;vc.153" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.110000" steps="435"/></proof>
  </goal>
  <goal name="main&#39;vc.154" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="62"/></proof>
  </goal>
  <goal name="main&#39;vc.155" expl="liveness" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="176"/></proof>
  </goal>
  <goal name="main&#39;vc.156" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="54"/></proof>
  </goal>
  <goal name="main&#39;vc.157" expl="safety" proved="true">
  <proof prover="6"><result status="valid" time="0.210000" steps="417"/></proof>
  </goal>
  <goal name="main&#39;vc.158" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="60"/></proof>
  </goal>
  <goal name="main&#39;vc.159" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.200000" steps="532"/></proof>
  </goal>
  <goal name="main&#39;vc.160" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.070000" steps="222"/></proof>
  </goal>
  <goal name="main&#39;vc.161" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.110000" steps="365"/></proof>
  </goal>
  <goal name="main&#39;vc.162" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="84"/></proof>
  </goal>
  <goal name="main&#39;vc.163" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.080000" steps="256"/></proof>
  </goal>
  <goal name="main&#39;vc.164" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="202"/></proof>
  </goal>
  <goal name="main&#39;vc.165" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.618159" steps="1545"/></proof>
  </goal>
  <goal name="main&#39;vc.166" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.250000" steps="787"/></proof>
  </goal>
  <goal name="main&#39;vc.167" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.050000" steps="161"/></proof>
  </goal>
  <goal name="main&#39;vc.168" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="1.131390" steps="1418"/></proof>
  </goal>
  <goal name="main&#39;vc.169" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="60"/></proof>
  </goal>
  <goal name="main&#39;vc.170" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.803967" steps="1581"/></proof>
  </goal>
  <goal name="main&#39;vc.171" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="69"/></proof>
  </goal>
  <goal name="main&#39;vc.172" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="70"/></proof>
  </goal>
  <goal name="main&#39;vc.173" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="70"/></proof>
  </goal>
  <goal name="main&#39;vc.174" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.080000" steps="246"/></proof>
  </goal>
  <goal name="main&#39;vc.175" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="62"/></proof>
  </goal>
  <goal name="main&#39;vc.176" expl="liveness" proved="true">
  <proof prover="6"><result status="valid" time="0.070000" steps="176"/></proof>
  </goal>
  <goal name="main&#39;vc.177" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="54"/></proof>
  </goal>
  <goal name="main&#39;vc.178" expl="unreachable point" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="174"/></proof>
  </goal>
  <goal name="main&#39;vc.179" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.090000" steps="378"/></proof>
  </goal>
  <goal name="main&#39;vc.180" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="71"/></proof>
  </goal>
  <goal name="main&#39;vc.181" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="62"/></proof>
  </goal>
  <goal name="main&#39;vc.182" expl="safety" proved="true">
  <proof prover="6"><result status="valid" time="0.260000" steps="611"/></proof>
  </goal>
  <goal name="main&#39;vc.183" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="68"/></proof>
  </goal>
  <goal name="main&#39;vc.184" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.280000" steps="721"/></proof>
  </goal>
  <goal name="main&#39;vc.185" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.190000" steps="770"/></proof>
  </goal>
  <goal name="main&#39;vc.186" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="2.246376" steps="1752"/></proof>
  </goal>
  <goal name="main&#39;vc.187" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.100000" steps="340"/></proof>
  </goal>
  <goal name="main&#39;vc.188" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.070000" steps="226"/></proof>
  </goal>
  <goal name="main&#39;vc.189" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.070000" steps="249"/></proof>
  </goal>
  <goal name="main&#39;vc.190" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="1.082397" steps="1736"/></proof>
  </goal>
  <goal name="main&#39;vc.191" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.473120" steps="1001"/></proof>
  </goal>
  <goal name="main&#39;vc.192" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="210"/></proof>
  </goal>
  <goal name="main&#39;vc.193" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.380000" steps="1036"/></proof>
  </goal>
  <goal name="main&#39;vc.194" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="68"/></proof>
  </goal>
  <goal name="main&#39;vc.195" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="1.643095" steps="2036"/></proof>
  </goal>
  <goal name="main&#39;vc.196" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="77"/></proof>
  </goal>
  <goal name="main&#39;vc.197" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.050000" steps="78"/></proof>
  </goal>
  <goal name="main&#39;vc.198" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.050000" steps="78"/></proof>
  </goal>
  <goal name="main&#39;vc.199" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.090000" steps="298"/></proof>
  </goal>
  <goal name="main&#39;vc.200" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="70"/></proof>
  </goal>
  <goal name="main&#39;vc.201" expl="liveness" proved="true">
  <proof prover="6"><result status="valid" time="0.080000" steps="212"/></proof>
  </goal>
  <goal name="main&#39;vc.202" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="54"/></proof>
  </goal>
  <goal name="main&#39;vc.203" expl="unreachable point" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="174"/></proof>
  </goal>
  <goal name="main&#39;vc.204" expl="precondition" proved="true">
  <proof prover="6"><result status="valid" time="0.020000" steps="56"/></proof>
  </goal>
  <goal name="main&#39;vc.205" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="264"/></proof>
  </goal>
  <goal name="main&#39;vc.206" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.130000" steps="386"/></proof>
  </goal>
  <goal name="main&#39;vc.207" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.470000" steps="487"/></proof>
  </goal>
  <goal name="main&#39;vc.208" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="64"/></proof>
  </goal>
  <goal name="main&#39;vc.209" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="0.090000" steps="273"/></proof>
  </goal>
  <goal name="main&#39;vc.210" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.040000" steps="87"/></proof>
  </goal>
  <goal name="main&#39;vc.211" expl="index in array bounds" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="80"/></proof>
  </goal>
  <goal name="main&#39;vc.212" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.212.0" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.211861" steps="304"/></proof>
   </goal>
   <goal name="main&#39;vc.212.1" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="88"/></proof>
   </goal>
   <goal name="main&#39;vc.212.2" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="102"/></proof>
   </goal>
   <goal name="main&#39;vc.212.3" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="88"/></proof>
   </goal>
   <goal name="main&#39;vc.212.4" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.060000" steps="93"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.213" expl="assertion" proved="true">
  <proof prover="6"><result status="valid" time="1.850000" steps="1064"/></proof>
  </goal>
  <goal name="main&#39;vc.214" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.214.0" expl="assertion" proved="true">
   <transf name="assert" proved="true" arg1="(memo1[th]&#39; &lt;&gt; memo1[th&#39;]&#39;)">
    <goal name="main&#39;vc.214.0.0" expl="asserted formula" proved="true">
    <proof prover="6"><result status="valid" time="1.209478" steps="886"/></proof>
    </goal>
    <goal name="main&#39;vc.214.0.1" expl="assertion" proved="true">
    <proof prover="6"><result status="valid" time="0.190000" steps="413"/></proof>
    </goal>
   </transf>
   </goal>
   <goal name="main&#39;vc.214.1" expl="assertion" proved="true">
   <transf name="replace" proved="true" arg1="memo[th&#39;]&#39;" arg2="memo1[th&#39;]&#39;" arg3="in" arg4="H">
    <goal name="main&#39;vc.214.1.0" expl="assertion" proved="true">
    <proof prover="6"><result status="valid" time="4.390000" steps="1149"/></proof>
    </goal>
    <goal name="main&#39;vc.214.1.1" expl="equality hypothesis" proved="true">
    <proof prover="6"><result status="valid" time="0.050000" steps="113"/></proof>
    </goal>
   </transf>
   </goal>
   <goal name="main&#39;vc.214.2" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.200000" steps="498"/></proof>
   </goal>
   <goal name="main&#39;vc.214.3" expl="assertion" proved="true">
   <proof prover="6"><result status="valid" time="0.030000" steps="102"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.215" expl="safety" proved="true">
  <proof prover="6"><result status="valid" time="4.920000" steps="1292"/></proof>
  </goal>
  <goal name="main&#39;vc.216" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="88"/></proof>
  </goal>
  <goal name="main&#39;vc.217" expl="loop invariant preservation" proved="true">
  <transf name="case" proved="true" arg1="(b = x.b1)">
   <goal name="main&#39;vc.217.0" expl="true case (loop invariant preservation)" proved="true">
   <proof prover="6"><result status="valid" time="0.050000" steps="113"/></proof>
   </goal>
   <goal name="main&#39;vc.217.1" expl="false case (loop invariant preservation)" proved="true">
   <transf name="replace" proved="true" arg1="owners[b]&#39;" arg2="owners1[b]&#39;">
    <goal name="main&#39;vc.217.1.0" expl="false case (loop invariant preservation)" proved="true">
    <transf name="split_vc" proved="true" >
     <goal name="main&#39;vc.217.1.0.0" expl="VC for main" proved="true">
     <proof prover="6"><result status="valid" time="0.200000" steps="417"/></proof>
     </goal>
     <goal name="main&#39;vc.217.1.0.1" expl="VC for main" proved="true">
     <proof prover="6"><result status="valid" time="0.200000" steps="417"/></proof>
     </goal>
     <goal name="main&#39;vc.217.1.0.2" expl="VC for main" proved="true">
     <proof prover="6"><result status="valid" time="2.160638" steps="1260"/></proof>
     </goal>
     <goal name="main&#39;vc.217.1.0.3" expl="VC for main" proved="true">
     <transf name="assert" proved="true" arg1="(x1 &lt;&gt; th)">
      <goal name="main&#39;vc.217.1.0.3.0" expl="asserted formula" proved="true">
      <proof prover="6"><result status="valid" time="0.060000" steps="116"/></proof>
      </goal>
      <goal name="main&#39;vc.217.1.0.3.1" expl="VC for main" proved="true">
      <transf name="replace" proved="true" arg1="memo[x1]&#39;" arg2="memo1[x1]&#39;" arg3="in" arg4="H">
       <goal name="main&#39;vc.217.1.0.3.1.0" expl="VC for main" proved="true">
       <proof prover="6"><result status="valid" time="1.640000" steps="1141"/></proof>
       </goal>
       <goal name="main&#39;vc.217.1.0.3.1.1" expl="equality hypothesis" proved="true">
       <proof prover="6"><result status="valid" time="0.050000" steps="118"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
    <goal name="main&#39;vc.217.1.1" expl="equality hypothesis" proved="true">
    <proof prover="6"><result status="valid" time="0.060000" steps="112"/></proof>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.218" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="94"/></proof>
  </goal>
  <goal name="main&#39;vc.219" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="90"/></proof>
  </goal>
  <goal name="main&#39;vc.220" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="119"/></proof>
  </goal>
  <goal name="main&#39;vc.221" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="91"/></proof>
  </goal>
  <goal name="main&#39;vc.222" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="2.787667" steps="1265"/></proof>
  </goal>
  <goal name="main&#39;vc.223" expl="loop invariant preservation" proved="true">
  <transf name="case" proved="true" arg1="(th=th1)">
   <goal name="main&#39;vc.223.0" expl="true case (loop invariant preservation)" proved="true">
   <proof prover="6"><result status="valid" time="0.120000" steps="302"/></proof>
   </goal>
   <goal name="main&#39;vc.223.1" expl="false case (loop invariant preservation)" proved="true">
   <proof prover="6"><result status="valid" time="5.020000" steps="1826"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.224" expl="loop invariant preservation" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="main&#39;vc.224.0" expl="loop invariant preservation" proved="true">
   <proof prover="6"><result status="valid" time="1.140000" steps="896"/></proof>
   </goal>
   <goal name="main&#39;vc.224.1" expl="loop invariant preservation" proved="true">
   <proof prover="6"><result status="valid" time="0.300000" steps="864"/></proof>
   </goal>
   <goal name="main&#39;vc.224.2" expl="loop invariant preservation" proved="true">
   <proof prover="6"><result status="valid" time="2.740000" steps="1284"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="main&#39;vc.225" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.230000" steps="537"/></proof>
  </goal>
  <goal name="main&#39;vc.226" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.820157" steps="946"/></proof>
  </goal>
  <goal name="main&#39;vc.227" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="91"/></proof>
  </goal>
  <goal name="main&#39;vc.228" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="5.500000" steps="2142"/></proof>
  </goal>
  <goal name="main&#39;vc.229" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.050000" steps="110"/></proof>
  </goal>
  <goal name="main&#39;vc.230" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.060000" steps="111"/></proof>
  </goal>
  <goal name="main&#39;vc.231" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.050000" steps="111"/></proof>
  </goal>
  <goal name="main&#39;vc.232" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.050000" steps="111"/></proof>
  </goal>
  <goal name="main&#39;vc.233" expl="loop invariant preservation" proved="true">
  <proof prover="6"><result status="valid" time="0.030000" steps="93"/></proof>
  </goal>
  <goal name="main&#39;vc.234" expl="liveness" proved="true">
  <proof prover="6"><result status="valid" time="0.130000" steps="318"/></proof>
  </goal>
 </transf>
 </goal>
</theory>
</file>
</why3session>
