correctness proof for shrinking