bast0-coq: a simple BAST model and correctness proof