As long as you are happy with the _programmer’s proof_ approach :)