Proving Type Safety for Java Simple Closures