Proving Assertions About Programs