Stephanie Balzer Thomas R. Gross Modular reasoning about invariants over shared state with interposed data members. 49-56 2010 PLPV http://doi.acm.org/10.1145/1707790.1707794 conf/plpv/2010 db/conf/plpv/plpv2010.html#BalzerG10