Operational semantics of WHILE in COQ