check in previous experiments
comments
big step preservation proof
adding a store: proof ok except one `trustme`
subtyping w/o store: proof ok, but `trustme` on inversion lemmas
sub-tp transitivity