Completed loop invariant proof.