more work on Agda proofs