A Provably Correct Hardware Implementation of Occam