Theorem provers that use dependent typing, like Coq.