constrained-random-verification