Dafny program verifier finished with 12 verified, 0 errors