Termination works with a fresh duplicated program

The termination checker updates the functions it checks in place (it
removes and adds post-conditions). We duplicate the program here to
ensure that side-effects do not propagate to other parts (such as
synthesis in the web-interface)