Verifying properties of parallel programs | Synapse