(*      semax vars G (fun s => call P (map s vars)) f -> *)
Definition program_proved (p: program) :=
exists G, semax_func G p G
/\ table_get G 0 = Some  (0::nil, lift1 allocpool (eval (Var 0))).

Axiom semax_prop:
forall (R: Prop) vars G P c,
typecheck vars c = true ->
(R -> semax vars G P c) ->
semax vars G (!!R && P) c.