Verification of relational properties on programs manipulating ADTs




We provide one experiment: