Add coq proofs.
Update document.