VAR
  
  a[32]
  b[32]
  c[32]
  d[32]

INVAR
  
  c = add(inc(b), a) 
  &
  d = inc(add(a, b))

SPEC
  
  c = d
