Hi Peter, at 24:03 (ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-IV-5vq01_xE.html), why do you need exhale Q(v)? In your paper link.springer.com/chapter/10.1007/978-3-319-89960-2_11, there is no such requirement ({true} l := alloc_{acq}(Q) {Rel(l, Q) * Acq(l, Q)}). I am interpreting exhale as assert, so exhale Q(v) means assert Q(v).