verified dynamics, fixing bounds on arm