 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
| |
Hand
Z Proofs
|
|
|
|
|
130
theorems during SRS phase
|
|
|
|
|
20
theorems in SDS phase
|
|
|
|
|
500
pages of proof in all
|
|
|
| |
Verification
Conditions (VCs)
|
|
|
|
|
5,900
generated from RTC
|
|
|
|
|
3,100
generated from function specifications
|
|
|
|
6,800
proved automatically
|
|
|
|
|
Rest
proved using proof checker
|
|