Dafny program verifier finished with 19 verified, 0 errors