A methodology for verifying programs | Synapse