> >>While this is not a formal proof, it's enough to convince me that Daniel's > change is safe. > > It is "convincing" that is important, a formal proof is a means to an end > not an end in itself :-) Fortunately Mark was not convinced.