Models That Prove Their Own Correctness