Added proof of correct operation to the README