May achieve by AST/IR based symbolic execution or utilize [](https://plum-umd.github.io/abstracting-definitional-interpreters/)
May achieve by AST/IR based symbolic execution or utilize