pub fn empty_proof() -> Proof