Reasoning About Program Transformations