Formally verifying Advent of Code using Dijkstra's program constructionharipm.com 57seafoamteal9mo8 comments