John Launchbury Galois: high assurance software. 3 2004 conf/icfp/2004 ICFP http://doi.acm.org/10.1145/1016850.1016852 db/conf/icfp/icfp2004.html#Launchbury04