proof irrelevance for leq