Proof of Correctness of Data Representations - Hoare, C (1972)