function f(int) returns (bool);
axiom (forall int x :: f(x) <== x >= 0);