Add formal proof for dynamic shifter