scheduling correctness q.e.d