Partial proof of Alloc (thm statement needs to be changed