int addiere(int x, int y) requires(x > 0 && y < 10) ensures(result > 0) { return x+y; }