n
Ý
The property to be verified:
Signal.Claim_Secret.a.b.m
e
Traces(System)
a
not(leak.m
e
Traces(System) )
n
As usual, this property can be verified
automatically by checking the traces
