Shaula Yemini Daniel M. Berry A Modular Verifiable Exception-Handling Mechanism. 214-243 1985 7 ACM Trans. Program. Lang. Syst. 2 http://doi.acm.org/10.1145/3318.3320 db/journals/toplas/toplas7.html#YeminiB85