- A1 A2 ... : prove A1 -> hyp A1 -> prove A2 -> hyp A2 ...
- Move smoke tests to the end of code assertions

- no they have the expected behavior

- reproduce assert behavior for invariants