formal theorem