diff, proofchecker