binadder.acl2 (from the ACL2 website
-- I didn't write this one)
traffic-light.acl2 (though note that
this is my in-progress version, not the one that will verify -- it
needs to swap the order of the states generated by run-tlc, as we
discussed in class)