Gilles Barthe Pierre Courtieu Guillaume Dufay Simão Melo de Sousa Tool-Assisted Specification and Verification of Typed Low-Level Languages. 295-354 2005 35 J. Autom. Reasoning 4 http://dx.doi.org/10.1007/s10817-005-0084-6 db/journals/jar/jar35.html#BartheCDS05