Formal proof