Coq originated from France's INRIA, is based on the Calculus of Inductive Constructions, and has been used to verify the proof of the Four Color Theorem