Lawrence C. Paulson Krzysztof Grabczewski Mechanizing Set Theory. 291-323 1996 17 J. Autom. Reasoning 3 db/journals/jar/jar17.html#PaulsonG96