File "bench/check-ce/ref_mono.mlw", line 7, characters 39-55:
Sub-goal Postcondition of goal ref1'vc.
Prover result is: Valid.

File "bench/check-ce/ref_mono.mlw", line 9, characters 29-40:
Sub-goal Postcondition of goal prefix !'vc.
Prover result is: Valid.

File "bench/check-ce/ref_mono.mlw", line 11, characters 38-44:
Sub-goal Postcondition of goal infix :='vc.
Prover result is: Valid.

<check_ce:categorization>Categorizations of models:
- Selected model 0: NC
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 21, characters 14-25)
  - Abstract RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 21, characters 14-25)
- Checked model 1: NC
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 21, characters 14-25)
  - Abstract RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 21, characters 14-25)
File "bench/check-ce/ref_mono.mlw", line 21, characters 14-25:
Sub-goal Postcondition of goal test_post'vc.
Prover result is: Unknown or time/memory/step limit.
The program does not comply to the verification goal, for example during the
  following execution:
File int.mlw:
  Line 13:
    Constant zero initialization
    zero = 0
  Line 14:
    Constant one initialization
    one = 1
File ref_mono.mlw:
  Line 20:
    x = 0
    y = {contents1= (- 1)}
    x = 0
    y = {contents1= (- 1)}
    Execution of main function `test_post` with env:
      x = 0
      y = {contents1= (- 1)}
      zero = 0
      one = 1
  Line 23:
    Normal execution of function `(!)` with args:
      r = {contents1= (- 1)}
  Line 9:
    Normal execution of function `contents` with args:
      arg = {contents1= (- 1)}
  Line 23:
    Normal execution of function `(-)` with args:
      x = 0
      y = 1
File int.mlw:
  Line 23:
    Normal execution of function `(-_)` with args:
      _ = 1
    Normal execution of function `(+)` with args:
      _ = 0
      _ = (-1)
File ref_mono.mlw:
  Line 23:
    Normal execution of function `(+)` with args:
      _ = (-1)
      _ = (- 1)
    Normal execution of function `(:=)` with args:
      r = {contents1= (- 1)}
      v = (-2)
  Line 21:
    Property failure at postcondition of `test_post` with:
      x = 0
      y = {contents1= (- 1)}

<check_ce:categorization>Categorizations of models:
- Selected model 0: NC
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 27, characters 14-29)
  - Abstract RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 27, characters 14-29)
- Checked model 1: NC
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 27, characters 14-29)
  - Abstract RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 27, characters 14-29)
File "bench/check-ce/ref_mono.mlw", line 27, characters 14-29:
Sub-goal Postcondition of goal test_post2'vc.
Prover result is: Unknown or time/memory/step limit.
The program does not comply to the verification goal, for example during the
  following execution:
File int.mlw:
  Line 13:
    Constant zero initialization
    zero = 0
  Line 14:
    Constant one initialization
    one = 1
File ref_mono.mlw:
  Line 25:
    x = 43
    y = {contents1= 0}
    x = 43
    y = {contents1= 0}
    Execution of main function `test_post2` with env:
      x = 43
      y = {contents1= 0}
      zero = 0
      one = 1
  Line 29:
    Normal execution of function `(!)` with args:
      r = {contents1= 0}
  Line 9:
    Normal execution of function `contents` with args:
      arg = {contents1= 0}
  Line 29:
    Normal execution of function `(-)` with args:
      x = 43
      y = 1
File int.mlw:
  Line 23:
    Normal execution of function `(-_)` with args:
      _ = 1
    Normal execution of function `(+)` with args:
      _ = 43
      _ = (-1)
File ref_mono.mlw:
  Line 29:
    Normal execution of function `(+)` with args:
      _ = 42
      _ = 0
    Normal execution of function `(:=)` with args:
      r = {contents1= 0}
      v = 42
  Line 27:
    Property failure at postcondition of `test_post2` with:
      x = 43
      y = {contents1= 42}
      y = {contents1= 0}

<check_ce:categorization>Categorizations of models:
- Selected model 0: NC
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 38, characters 12-36)
  - Abstract RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 38, characters 12-36)
- Checked model 1: NC
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 38, characters 12-36)
  - Abstract RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 38, characters 12-36)
File "bench/check-ce/ref_mono.mlw", line 38, characters 12-36:
Sub-goal Postcondition of goal incr'vc.
Prover result is: Unknown or time/memory/step limit.
The program does not comply to the verification goal, for example during the
  following execution:
File int.mlw:
  Line 13:
    Constant zero initialization
    zero = 0
  Line 14:
    Constant one initialization
    one = 1
File ref_mono.mlw:
  Line 35:
    y = {contents1= (- 1)}
  Line 37:
    x23 = {contents1= 0}
    x23 = {contents1= 0}
    Execution of main function `incr` with env:
      y = {contents1= (- 1)}
      x23 = {contents1= 0}
      zero = 0
      one = 1
  Line 40:
    Normal execution of function `(!)` with args:
      r = {contents1= (- 1)}
  Line 9:
    Normal execution of function `contents` with args:
      arg = {contents1= (- 1)}
  Line 40:
    Normal execution of function `(+)` with args:
      _ = (- 1)
      _ = 1
    Normal execution of function `(:=)` with args:
      r = {contents1= (- 1)}
      v = 0
  Line 41:
    Normal execution of function `(!)` with args:
      r = {contents1= 0}
  Line 9:
    Normal execution of function `contents` with args:
      arg = {contents1= 0}
  Line 41:
    Normal execution of function `(+)` with args:
      _ = 0
      _ = 1
    Normal execution of function `(:=)` with args:
      r = {contents1= 0}
      v = 1
  Line 42:
    Normal execution of function `(!)` with args:
      r = {contents1= 1}
  Line 9:
    Normal execution of function `contents` with args:
      arg = {contents1= 1}
  Line 42:
    Normal execution of function `(+)` with args:
      _ = 1
      _ = 1
    Normal execution of function `(:=)` with args:
      r = {contents1= 1}
      v = 2
  Line 38:
    Property failure at postcondition of `incr` with:
      x23 = {contents1= 2}
      x23 = {contents1= 0}
      y = {contents1= (- 1)}

<check_ce:categorization>Categorizations of models:
- Checked model 0: BAD_CE
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 48, characters 2-8)
  - Abstract RAC: FAILURE (loop invariant init at "bench/check-ce/ref_mono.mlw", line 51, characters 14-36)
- Selected model 1: BAD_CE
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 48, characters 2-8)
  - Abstract RAC: FAILURE (loop invariant init at "bench/check-ce/ref_mono.mlw", line 51, characters 14-36)
File "bench/check-ce/ref_mono.mlw", line 51, characters 14-36:
Sub-goal Loop invariant init of goal test_loop'vc.
Prover result is: Unknown or time/memory/step limit.
Sorry, we don't have a good counterexample for you :(


File "bench/check-ce/ref_mono.mlw", line 52, characters 12-14:
Sub-goal Loop variant decrease of goal test_loop'vc.
Prover result is: Valid.

<check_ce:categorization>Categorizations of models:
- Checked model 0: BAD_CE
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 48, characters 2-8)
  - Abstract RAC: FAILURE (loop invariant init at "bench/check-ce/ref_mono.mlw", line 51, characters 14-36)
- Selected model 1: BAD_CE
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 48, characters 2-8)
  - Abstract RAC: FAILURE (loop invariant init at "bench/check-ce/ref_mono.mlw", line 51, characters 14-36)
File "bench/check-ce/ref_mono.mlw", line 51, characters 14-36:
Sub-goal Loop invariant preservation of goal test_loop'vc.
Prover result is: Unknown or time/memory/step limit.
Sorry, we don't have a good counterexample for you :(


<check_ce:categorization>Categorizations of models:
- Checked model 0: BAD_CE
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 48, characters 2-8)
  - Abstract RAC: FAILURE (loop invariant init at "bench/check-ce/ref_mono.mlw", line 51, characters 14-36)
- Selected model 1: BAD_CE
  - Concrete RAC: FAILURE (postcondition at "bench/check-ce/ref_mono.mlw", line 48, characters 2-8)
  - Abstract RAC: FAILURE (loop invariant init at "bench/check-ce/ref_mono.mlw", line 51, characters 14-36)
File "bench/check-ce/ref_mono.mlw", line 45, characters 12-23:
Sub-goal Postcondition of goal test_loop'vc.
Prover result is: Unknown or time/memory/step limit.
Sorry, we don't have a good counterexample for you :(


