The absence of a proof of correctness is not a proof of incorrectness, strictly speaking.