software correctness witness with a predicate annotated at the loop head of the translated C program, which some software verifier claims to be an invariant,3 Btor2-Cert considers the predicate as a candidate invariant for the original Btor2 circuit and extracts it to reconstruct a safety proof...