David A. Naumann Michael Barnett Towards imperative modules: Reasoning about invariants and sharing of mutable state. 143-168 2006 365 Theor. Comput. Sci. 1-2 http://dx.doi.org/10.1016/j.tcs.2006.07.035 db/journals/tcs/tcs365.html#NaumannB06