Sebastian Burckhardt Rajeev Alur Milo M. K. Martin Verifying Safety of a Token Coherence Implementation by Parametric Compositional Refinement. 130-145 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=3385&spage=130 2005 conf/vmcai/2005 VMCAI db/conf/vmcai/vmcai2005.html#BurckhardtAM05