verified lock-free list