a=asumasmulfV0V3V1V2a*V3asumV0V1V2Ia=asumasmulfV0V3V1V4a*V3asumV0V1V4La-V2c1ONa>V2V1Aa<a-a-V2c1V1a-V2V1Aa<=c0a-V2V1Ia>V2V1F
VC for sum_mult
a=asumasmulfV0V3V1V2a*V3asumV0V1V2F
a=asumaaddfV4V5V6V7a+asumV4V6V7asumV5V6V7Ia=asumaaddfV4V5V6V8a+asumV4V6V8asumV5V6V8La-V7c1ONa>V7V6Aa<a-a-V7c1V6a-V7V6Aa<=c0a-V7V6Ia>V7V6F
VC for sum_add
a=asumaaddfV4V5V6V7a+asumV4V6V7asumV5V6V7F
a=a@asumfV9V10V11V14c0FIa<=V11V10Ia=a@a@V8V15V16a@a@V9V16V15Ia<V16V13Aa<=V12V16Aa<V15V11Aa<=V10V15FF
assertion
a<a-V14V10a-V11V10Aa<=c0a-V11V10La-V11c1INa<=V11V10Ia=a@a@V8V15V16a@a@V9V16V15Ia<V16V13Aa<=V12V16Aa<V15V11Aa<=V10V15FF
variant decrease
a=a@a@V8V15V16a@a@V9V16V15Ia<V16V13Aa<=V12V16Aa<V15V14Aa<=V10V15FLa-V11c1INa<=V11V10Ia=a@a@V8V17V18a@a@V9V18V17Ia<V18V13Aa<=V12V18Aa<V17V11Aa<=V10V17FF
precondition
a=asumasumfV9V10V11V12V13asumV15V12V13ItOa=a@asumfV9V10V11V16a@V15V16Ia<V16V13Aa<=V12V16FLaaddfasumfV9V10a-V11c1a@V8a-V11c1Ia=asumasumfV8V12V13V10V14asumasumfV9V10V14V12V13La-V11c1INa<=V11V10Ia=a@a@V8V17V18a@a@V9V18V17Ia<V18V13Aa<=V12V18Aa<V17V11Aa<=V10V17FF
a=asumasumfV8V12V13V10V11asumasumfV9V10V11V12V13Iia=asumasumfV9V10V11V12V13asumV15V12V13LaaddfasumfV9V10a-V11c1a@V8a-V11c1Aa=asumasumfV8V12V13V10V14asumasumfV9V10V14V12V13La-V11c1a=a@asumfV9V10V11V16c0Fa<=V11V10Ia=a@a@V8V17V18a@a@V9V18V17Ia<V18V13Aa<=V12V18Aa<V17V11Aa<=V10V17FF
postcondition
a=asumasumfV8V12V13V10V11asumasumfV9V10V11V12V13Iia=asumasumfV9V10V11V12V13asumV15V12V13ItOa=a@asumfV9V10V11V16a@V15V16Ia<V16V13Aa<=V12V16FLaaddfasumfV9V10a-V11c1a@V8a-V11c1Aa=asumasumfV8V12V13V10V14asumasumfV9V10V14V12V13La-V11c1a=a@asumfV9V10V11V17c0Fa<=V11V10Aia=asumasumfV9V10V11V12V13asumV19V12V13ItOa=a@asumfV9V10V11V20a@V19V20Ia<V20V13Aa<=V12V20FLaaddfasumfV9V10a-V11c1a@V8a-V11c1Ia=asumasumfV8V12V13V10V18asumasumfV9V10V18V12V13Aa=a@a@V8V21V22a@a@V9V22V21Ia<V22V13Aa<=V12V22Aa<V21V18Aa<=V10V21FAa<a-V18V10a-V11V10Aa<=c0a-V11V10La-V11c1a=a@asumfV9V10V11V23c0Fa<=V11V10Ia=a@a@V8V24V25a@a@V9V25V24Ia<V25V13Aa<=V12V25Aa<V24V11Aa<=V10V24FF
VC for fubini
a=asumasumfV8V12V13V10V11asumasumfV9V10V11V12V13Ia=a@a@V8V14V15a@a@V9V15V14Ia<V15V13Aa<=V12V15Aa<V14V11Aa<=V10V14FF
a=asumV16V18V19asumV17V18V19Ia=a@V16V20a@V17V20Ia<V20V19Aa<=V18V20FF
VC for sum_ext

7c834dbdc9e020d23391e83bbbdead63 1H0
b7a5cb75c8b30f8ac9b14399a3e7a339 4H3H2
97903244b7a3dc1c2ae7d1c906edae83 16H15H5H2
b0d19bd7ca889e2d7f77a26a531d42e7 7H6H5H2
85ed39d0ac9eb6b2c2ac65ebcbcdf9f3 9H8H5H2
3303715d5973ef250c4c9a3d5f87644e 11H10H5H2
993e8feb9b8f6c4e7612f82eb8720e84 7H12H5H2
666d5a9de683d956b4cea7b2ad5e842a 14H13H5H2
962f7bc7094b1ec8ee0a3d07770176a5 19H18H17H5H2
