Karl Crary Susmit Sarkar Foundational Certified Code in a Metalogical Framework. 106-120 http://dx.doi.org/10.1007/978-3-540-45085-6_9 2003 conf/cade/2003 CADE db/conf/cade/cade2003.html#CraryS03