Static timing analysis and program proof