Kalman filter proof