Improve correctness proof