Describir: An example of goal-directed, calculational proof