Jean-Christophe Filliâtre Proof of Imperative Programs in Type Theory. 78-92 http://link.springer.de/link/service/series/0558/bibs/1657/16570078.htm 1998 conf/types/1998 TYPES db/conf/types/types98.html#Filliatre98