SHOLIS Proofs
• Hand Z Proofs
– 130 theorems during SRS phase
– 20 theorems in SDS phase
– 500 pages of proof in all
• Verification Conditions (VCs)
– 5,900 generated from RTC
– 3,100 generated from function specifications
– 6,800 proved automatically
– Rest proved using proof checker