DCN-370: Proving Differential Privacy…