All we need now is a proof that the proof program is correct. And a proof that the proof proving program is correct.
The manual task is to verify all the assumptions.
But without formal verification both your spec and the implementation may be incorrect.