SPARK 2014 Formalization in Coq