fixed proof borken by change to real_inst_length