verified SEE correctness