Robert Pollack On Extensibility of Proof Checkers. 140-161 1994 conf/types/1994 TYPES db/conf/types/types94.html#Pollack94