Proof-checking a data link protocol by L. Helmink