An automatically generated and provably correct compiler for a subset of Ada