Daniel J. Moore Bruce Russell Axiomatic Data Type Specifications: A First Order Theory of Linear Lists. 193-207 1981 15 Acta Inf. db/journals/acta/acta15.html#MooreR81