total correctness