verification condition generation