Move, Movelang, Move Prover, Formal Verification, Quality Assurance.
Coin<CoinType> { aborts_if coin.value < amount; ensures result.value == amount; ensures coin.value == old(coin.value) - amount; } The extract function is expected to extract and return the amount of coins from the coin parameter. The specification above is the mathematical representation of the