Fitch-style proof constructor