added partial skeleton of final correctness proof