Figure: Hoare logic