Initial work to enable proving cluster correctness