finish Induction.v except formalize()