Verifying safety policies with size properties and alias controls