fact: Definition p_nonce : program nat := p_do n <- p_get; p_do _ <- p_put (S n); p_do _ <- p_mark n; p_ret n.
imports: Eqdep JMeq List ssreflect mathcomp(ssreflect ssrfun ssrbool eqtype ssrnat seq) hierarchy monad_lib state_lib trace_lib monad_model