Move, Movelang, Move Prover, Formal Verification, Quality Assurance.
expected behavior of the function. The aborts_if clause specifies that the function should abort if the value of the original coin is less than the amount. It also implies that the function should not abort in any other case. The two ensures clauses specify that the value of the returned coin is