Jordi Fanes-Casals

• Proving correctness of constructor implementations