add formal proof for OP_RLCR