(*      semax vars G (fun s => call P (map s vars)) f -> *)
Definition program_proved (p: program) :=
exists G, semax_func G p G
/\ table_get G 0 = Some  (0::nil, lift1 allocpool (eval (Var 0))).

Axiom semax_G:
forall vars G P c, semax vars G (P && lift0 (funassert G)) c -> semax vars G P c.