finish proof of INST_TYPE_correct