Title: Proving a computer correct in higher order logic