Goal:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
match goal with
           | H:~ _ |- _ => solve [ case H; trivial ]
           end
Level 1: Backtrace:

No such assumption.
Level 0: Backtrace:

No such assumption.
Level 0: Backtrace:

No such assumption.
Level 0: Backtrace:

No such assumption.

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
lia
Level 0: Backtrace:

No matching clauses for match.
Level 0: Backtrace:

No applicable tactic.
Level 0: Backtrace:

No applicable tactic.
Level 0: Backtrace:

No applicable tactic.
Level 0: Backtrace:

No applicable tactic.
Level 0: Backtrace:

No applicable tactic.
Level 0: Backtrace:

No applicable tactic.
Level 0: Backtrace:

No applicable tactic.
Level 1: Backtrace:

No applicable tactic.
Level 0: Backtrace:

No applicable tactic.

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
Zify.zify; xlia zchecker

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
Zify.zify

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
intros; Zify.zify_pre_hook; zify_elim_let; zify_op;
            Zify.zify_iter_specs; Zify.zify_to_euclidean_division_equations;
            Zify.zify_post_hook; zify_saturate

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
intros; Zify.zify_pre_hook; zify_elim_let; zify_op;
            Zify.zify_iter_specs; Zify.zify_to_euclidean_division_equations;
            Zify.zify_post_hook

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
intros; Zify.zify_pre_hook; zify_elim_let; zify_op;
            Zify.zify_iter_specs; Zify.zify_to_euclidean_division_equations

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
intros; Zify.zify_pre_hook; zify_elim_let; zify_op;
            Zify.zify_iter_specs

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
intros; Zify.zify_pre_hook; zify_elim_let; zify_op

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
intros; Zify.zify_pre_hook; zify_elim_let

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
intros; Zify.zify_pre_hook

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  ============================
   (nx + _a_ <= ny ->
    _a_ <= nxy -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  ============================
   (True -> True -> ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
intros

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
Zify.zify_pre_hook

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
idtac

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
zify_elim_let

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
<coq-core.plugins.zify::TRANS@3>

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
zify_op

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  ============================
   (ny - (nx + Z.of_nat (Z.to_nat (ny - nx - nxy))) <= nxy)


DEBUG:Going to execute:
<coq-core.plugins.zify::TRANS@0>

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  ============================
   (ny - (nx + Z.max 0 (ny - nx - nxy)) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  ============================
   (ny - (nx + Z.max 0 (ny - nx - nxy)) <= nxy)


DEBUG:Going to execute:
Zify.zify_iter_specs

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  ============================
   (ny - (nx + Z.max 0 (ny - nx - nxy)) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  ============================
   (ny - (nx + Z.max 0 (ny - nx - nxy)) <= nxy)


DEBUG:Going to execute:
fun => <coq-core.plugins.zify::ITER@0>

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  z1 : Z
  H1 : 0 < ny - nx - nxy /\ z1 = ny - nx - nxy \/
       ny - nx - nxy <= 0 /\ z1 = 0
  ============================
   (ny - (nx + z1) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  z1 : Z
  H1 : 0 < ny - nx - nxy /\ z1 = ny - nx - nxy \/
       ny - nx - nxy <= 0 /\ z1 = 0
  ============================
   (ny - (nx + z1) <= nxy)


DEBUG:Going to execute:
Zify.zify_to_euclidean_division_equations

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  z1 : Z
  H1 : 0 < ny - nx - nxy /\ z1 = ny - nx - nxy \/
       ny - nx - nxy <= 0 /\ z1 = 0
  ============================
   (ny - (nx + z1) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  z1 : Z
  H1 : 0 < ny - nx - nxy /\ z1 = ny - nx - nxy \/
       ny - nx - nxy <= 0 /\ z1 = 0
  ============================
   (ny - (nx + z1) <= nxy)


DEBUG:Going to execute:
lazymatch Zify.zify_convert_to_euclidean_division_equations_flag
           with
           | true =>
               Zify.zify_internal_to_euclidean_division_equations
           | false => idtac
           end

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  z1 : Z
  H1 : 0 < ny - nx - nxy /\ z1 = ny - nx - nxy \/
       ny - nx - nxy <= 0 /\ z1 = 0
  ============================
   (ny - (nx + z1) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  z1 : Z
  H1 : 0 < ny - nx - nxy /\ z1 = ny - nx - nxy \/
       ny - nx - nxy <= 0 /\ z1 = 0
  ============================
   (ny - (nx + z1) <= nxy)


DEBUG:Going to execute:
Zify.zify_convert_to_euclidean_division_equations_flag

Goals:
  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  _a_ : Z
  E : lsp G x y = Some _a_
  H : nx + _a_ <= ny
  hxy0 : _a_ <= nxy
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  z1 : Z
  H1 : 0 < ny - nx - nxy /\ z1 = ny - nx - nxy \/
       ny - nx - nxy <= 0 /\ z1 = 0
  ============================
   (ny - (nx + z1) <= nxy)

  
  G : t
  invG : invariants G
  acG : acyclic_no_loop G
  x : V.t
  y : V.t
  hx : VSet.In x (V G)
  hy : VSet.In y (V G)
  nxy : Z
  hxy : (lsp G x y <= Some nxy)%nbar
  nx : Z
  eqlspx : lsp G (s G) x = Some nx
  nxpos : 0 <= nx
  eqnx : Z.of_nat (to_label (lsp G (s G) x)) = nx
  ny : Z
  eqlspy : lsp G (s G) y = Some ny
  nypos : 0 <= ny
  eqny : Z.of_nat (to_label (lsp G (s G) y)) = ny
  E : lsp G x y = None
  H : True
  hxy0 : True
  cstr : 0 <= Z.of_nat (to_label (lsp G (s G) x))
  cstr0 : 0 <= Z.of_nat (to_label (lsp G (s G) y))
  z1 : Z
  H1 : 0 < ny - nx - nxy /\ z1 = ny - nx - nxy \/
       ny - nx - nxy <= 0 /\ z1 = 0
  ============================
   (ny - (nx + z1) <= nxy)


DEBUG:Going to execute:
constr:(false)