cbmc based tool for verifying copilot programs