IL3 verification reduced to 2 cheated lemmas

The lemmas state the correctness of the code that initialises the global
variables.