CakeML: A Verified Implementation of ML