The Coq Proof Assistant