Correct by construction non-empty list - View it on GitHub