The time has come: Claude is able to poke holes in the dark corners of Rocq's kernel and come up with proofs of False!

The days of "our reasonable users use the unreasonable features only in reasonable ways so it's ok to have them" really are over. Can't wait until someone vibe codes a complicated proof without looking too closely at it (since it's been checked by the kernel, it must be fine!) only to later realise it was actually bogus and such a bug without the agent saying so...

@mevenlennonbertrand here is a full account of what was found (collaboration between Opus 4.6 and rocq experts):

- 3 proofs of false from bugs in the guard checker
- 2 proofs of false from bugs in the module system (the second one uses Girard's paradox)
- 1 proof of false from a bug in `conversion.ml`
- 1 proof of false from a bug in `discharge.ml` (using Hurkens' paradox)
- 1 anomaly from a bug in `conversion.ml`
- 2 bugs in `cClosure.ml`
- 1 bug in `mod_declarations.ml`