Automatic Program Verification III: A Methodology for Verifying Programs. AIM-256