Dafny program verifier finished with 2 verified, 0 errors Compiled assembly into Bug116.exe