Proof, invariants, and correctness | Zoonk