Donald Sannella Andrzej Tarlecki Formal Development of ML Programs: Methodological Aspects. 1988 ADT db/conf/adt/adt1988.html#SannellaT88