prove semantics_aconv