Proving Reflex Program Verification Conditions in Coq Proof Assistant | IEEE Conference Publication | IEEE Xplore