Theorem

Loop invariant correctness theorem

If an invariant is true before the loop, is preserved by every iteration, and together with the termination condition implies the postcondition, then the loop is partially correct.