Coq

https://www.cis.upenn.edu/~bcpierce/sf/current/index.html