3. Using your model,

(a) Define a predicate on the states that expresses that b is never less than r.

(b) Verify that your predicate is a preserved invariant on the states.

(c) Use the invariant to conclude that SFC will never fall into the ocean if the above

description remains true.