Updated the README with an unexpectedly vebose proof of program correctness.