simplify proof of Bitstream_Write