Dependent Type Theory And Formal Proof