Email Record: Practical Deductive Verification of OCaml Programs