Dafny program verifier finished with 6 verified, 0 errors