Modeling and proofs about the state space construction in Coq