Typesafe-by-construction Simple Typed Lambda Calculus implementation