Jawahar Chirimar Carl A. Gunter Jon G. Riecke Proving Memory Management Invariants for a Language Based on Linear Logic. 139-150 1992 LISP and Functional Programming http://doi.acm.org/10.1145/141471.141527 db/conf/lfp/lfp1992.html#ChirimarGR92