Proof of type safety for Simply Typed Lambda Calculus in Coq.