Developing verified programs with Dafny | IEEE Conference Publication | IEEE Xplore