Correctness annotations for Java code