Title: Proof in VDM