Peter Dybjer Herbert P. Sander A Functional Programming Approach to the Specification and Verification of Concurrent Systems. 303-319 1989 1 Formal Asp. Comput. 4 db/journals/fac/fac1.html#DybjerS89