prove the two cheats in initialProgramScript.sml