`sem.malloc.fail` makes memory leak analysis less precise

Apron unsoundly retains relations for locals modified through an escaped pointer

Cram tests fail with recent `dune`

Port tutorial analyses over to simplified spec

`queries.ml`: Detect if number is assigned multiple times in `order`

Tutorial `signs.ml`: More robust testing

Apply transfer function to resulting paths if `split` happens in `sync`

SV-COMP archive.sh does not fail when `chrpath` is missing

Ghost update program instrumenter

Audit for performance bottlenecks