fix another proof in wellorderScript.sml