Verified compiler output