Hilbert–Bernays provability conditions