https://123dok.net/document/qmj26j5q-deductive-proof-of-ethereum-smart-contracts-using-why3.html