Olha Shkaravska Types with semantics: soundness proof assistant. 50-57 2005 MERLIN http://doi.acm.org/10.1145/1088454.1088461 conf/icfp/2005merlin db/conf/icfp/merlin2005.html#Shkaravska05