move proof to reflectionScript.sml