If a piece of software is in safety-critical applications these days, it is often required to have a proof of correctness.