Dafny program verifier finished with 25 verified, 0 errors