Invariant generation: lock step driver