Developing verified programs with Dafny