Threading proofs through