Added Coq formalisation.