It compiles to multiple targets (C#, Java, Go, Python, JavaScript) and embeds a specification sublanguage directly in the source syntax. The verification engine generates verification conditions (VCs) ...