One thing that came up in a discussion with @jialin-li is that, we currently can only figure out which procedure is unstable in Verus. Given a procedure $P$, it is not clear if the instability is because of:
- an assertion in $P$
- post-condition of $P$
- pre-condition of a call in $P$
This might be a nice to have feature?