Stav dette: Higher-order constrained horn clauses for verification