Work on correctness proof