3 ms·

Why wouldn’t you use dafny?