Validation By Correctness Proofs