Draft version of proving correctness of leftist heaps with dependent types