Fig. 6.From: Practical Deductive Verification of OCaml ProgramsProof Task for an Incorrect Loop Invariant Initialization.Back to paper page
