Title: Correct by Construction in F#