Title: A mechanized proof of correctness of a simple counter