The proof prover proves the proof, but who shall prove the proof prover?