=========
Summary
=========

-------------------
Auto-active Proof
-------------------

* Not all proofs are easy

* Understand tool messages

  - Messages guide you to help the tool
  - Many useful parts in a message

* Auto-active proof needed for harder proofs

  - Intermediate assertions
  - Ghost code for specification and verification
  - Lemmas to separately prove properties

* Ghost code has no effect

  - Compiler can ignore it or compile it
