Dimitri Hendriks Proof Reflection in Coq. 277-307 2002 29 J. Autom. Reasoning 3-4 db/journals/jar/jar29.html#Hendriks02