Proof in VDM: A Practitioner’s Guide