G github.com Proving false in Coq using an implementation bug 125 points clarus 11 years ago 61 comments