Added proof for hoare if.