verifying the properties of Horus protocol stacks
