Prove a property for the Congress contract

This proves a concrete property about any Congress contract deployed to
a blockchain. More specifically, we show that the count of transactions
sent out by any Congress contract will always be less than or equal to
the total number of actions it has receive in "create proposal"
messages.
Thus, this property is stated only over the transactions going in and
out to the Congress contract.
To prove this, we reason over incoming and outgoing transactions, the
internal state of the congress and also the actions in the blockchain
queue.
3 jobs for master in 22 seconds (queued for 1 second)
Status Name Job ID Coverage
  Build
failed coq:8.8 #84835
au

00:00:11

failed coq:8.9 #84836
au

00:00:11

failed coq:dev #84837
au

00:00:11

 
Name Stage Failure
failed
coq:dev Build
  on au-runner1 54aab88d
Using Docker executor with image coqorg/coq:dev ...
Pulling docker image coqorg/coq:dev ...
Using docker image sha256:97c6e9d194713ace43de2dd8621a894f99cf69e59b1394e4f6ad171c51680d91 for coqorg/coq:dev ...
Running on runner-54aab88d-project-2289-concurrent-0 via gitrunning01.uni.au.dk...
Reinitialized existing Git repository in /builds/jakobbotsch/smart-contracts/.git/
Fetching changes...
fatal: unable to access 'https://gitlab-ci-token:xxxxxxxxxxxxxxxxxxxx@gitlab.au.dk/jakobbotsch/smart-contracts.git/': Could not resolve host: gitlab.au.dk
ERROR: Job failed: exit code 1
failed
coq:8.9 Build
  on au-runner2 7ae4f001
Using Docker executor with image coqorg/coq:8.9 ...
Pulling docker image coqorg/coq:8.9 ...
Using docker image sha256:fd1833043684d796310813ac6a5f03217f9933c3f3a96aa85d739d311163bc0c for coqorg/coq:8.9 ...
Running on runner-7ae4f001-project-2289-concurrent-0 via gitrunning02.uni.au.dk...
Reinitialized existing Git repository in /builds/jakobbotsch/smart-contracts/.git/
Fetching changes...
fatal: unable to access 'https://gitlab-ci-token:xxxxxxxxxxxxxxxxxxxx@gitlab.au.dk/jakobbotsch/smart-contracts.git/': Could not resolve host: gitlab.au.dk
ERROR: Job failed: exit code 1
failed
coq:8.8 Build
  on au-runner1 54aab88d
Using Docker executor with image coqorg/coq:8.8 ...
Pulling docker image coqorg/coq:8.8 ...
Using docker image sha256:0b0fc53c632f400207afd4497c7e6740b8ff43ec765f8636b6e88b50d530b9aa for coqorg/coq:8.8 ...
Running on runner-54aab88d-project-2289-concurrent-0 via gitrunning01.uni.au.dk...
Reinitialized existing Git repository in /builds/jakobbotsch/smart-contracts/.git/
Fetching changes...
fatal: unable to access 'https://gitlab-ci-token:xxxxxxxxxxxxxxxxxxxx@gitlab.au.dk/jakobbotsch/smart-contracts.git/': Could not resolve host: gitlab.au.dk
ERROR: Job failed: exit code 1