Formalize one_shot example program.

The proof is not pretty, though...
1 job for master
Status Job ID Name Coverage
  Test
passed #255
coq
buildjob

00:03:18