Correct program correctness