prove the correctness through the steps:

$1.$ state the loop invariant

$2.$ prove the loop invariant

$3.$ prove that the postcondtion is satified using the loop invariant

$4.$ prove that the loop terminates