Program proving: Coroutines | doi.page