Properties of models which are complete for Hoare logic