How do you prove the lean code represents what the code its proving?