Proving that every program halts