Title: Mechanizing proofs of program properties