spec proof comments 1 9 2 coqwc/theorem.v