Chandrasekhar Boyapati Barbara Liskov Liuba Shrira Ownership types for object encapsulation. 213-223 2003 POPL http://doi.acm.org/10.1145/640128.604156 db/conf/popl/popl2003.html#BoyapatiLS03