slide: Behavioral subtypes -- proof obligations