Malcolm Dowse Glenn Strong Andrew Butterfield Proving Make Correct: I/O Proofs in Haskell and Clean. 68-83 http://dx.doi.org/10.1007/3-540-44854-3_5 2002 conf/ifl/2002 IFL db/conf/ifl/ifl2002.html#DowseSB02