a1,…,an
slide: The verification of state transformations