Proof refactoring