Proving the correctness of reactive systems using sized types (1996)

by John Hughes, Lars Pareto, Amr Sabry
Venue:In POPL ’96, Proceedings of the 23rd ACM SIGPLAN-SIGACT symposium on Principles of programming languages