hybrid Hoare logic