interpreter verification proof sketch