Yves Bertot Gilles Kahn Laurent Théry Proof by Pointing. 141-160 1994 conf/tacs/1994 TACS db/conf/tacs/tacs94.html#BertotKT94