CertiK used the Coq proof assistant to prove zkWasm's circuits sound across its full instruction set, catching a design bug audits missed.