final version of Coq model