Assignment computed by Houdini: Boogie program verifier finished with 2 verified, 0 errors