Prove double_plus