fix formalization bug