Made invariant of class 'Absy' robust by changing the design (added getter/setter instead of public field).
Made invariant of class 'Program' robust by
-adding various preconditions
-removing null elements in the setter
-using the "ReadOnlyList" wrapper.
Made expression invariant of class 'Axiom' robust by changing the design (replaced public field by getter/setter).
Made 2 invariants of class 'TypeSynonymDecl' robust by changing the design (replaced public fields by private fields + getters/setters).
Made invariant of class 'Variable' robust by changing the design (replaced public field by private field + getter/setter).
Made invariant of class 'Requires' robust by changing the design (replaced public field by private field + getter/setter).
Made 2 invariants of class 'TypepedIdent' robust by changing the design (replaced public fields by private fields + getters/setters).
Made invariant of class 'Choice' robust by changing the design (replaced public field by private field + getter/setter).
Made 2 invariants of class 'Sequential' robust by changing the design (replaced public fields by private fields + getters/setters).
Merge
Made invariant of class 'Ensures' robust by changing the design (replaced public field by private field + getter/setter).
Made invariant of class 'CommandLineOptionEngine' robust by changing the design (replaced public field by private field + getter/setter).
Made 2 invariants of type 'AssignCmd' robust by
-replacing public fields by private fields + getters/setters,
-making setters and constructor create a copy of the arguments,
-making getters return read-only lists.
Made 2 invariants of type 'StateCmd' robust by changing the design
(replaced public fields by private fields + getters/setters).
Made invariant of class 'HavocCmd' robust by changing the design (replaced public field by private field + getter/setter).
Made invariant of class 'ProcedureSummaryEntry' robust by changing the design
(replaced public field by private field + getter/setter).
Made invariant of class 'Scanner' robust by changing the design (replaced public field by private field + getter/setter).
Made invariant of class 'CommandLineOptionEngine' robust by
-replacing public field by read-only private field + getter,
-making getter return read-only list.
Made invariant of class 'CommandLineOptions' robust by
-changing the design (replaced public field by private field + getter/setter),
-moving the invariant to class 'CommandLineOptionEngine'.
Made invariant of class 'CommandLineOptions' robust by changing the design
(replaced public field by private field + getter/setter).