Closed kanigsson closed 2 years ago
The postcondition of Set_Scalar doesn't state that the parameters of a parameterized message stay unchanged, which leads to unprovable checks.
The postcondition of Set_Scalar doesn't state that the parameters of a parameterized message stay unchanged, which leads to unprovable checks.