Xavier Leroy Formal verification of a realistic compiler. 107-115 2009 52 Commun. ACM 7 http://doi.acm.org/10.1145/1538788.1538814 db/journals/cacm/cacm52.html#Leroy09