Proofs And Proof Transformations For Object-Oriented Programs