* Introduce LUTE theorems to check for ARINC653 verification