Correctness proofs for vector conversions