palavras-chave Hoare logic Program annotations Program verification Program verification Updates Verification conditions Verification conditions Weakest preconditions