pop()
slide: Behavioral subtypes -- proof obligations