add proof tail_init