Title: Proving properties about subroutines that solve ODE's numerically