checked correctness