ada: Use ghost predicate in standard library