Deriving Modular Programs from Short Proofs -- A General Method for Using