Stav dette: Correct Programs, Executed Correctly: Verifying Specifications and Executions