eq-up in Correctness.lagda