Proofs for nats and lists.