Prove reservoir sampling correctness | Other