A trustworthy proof checker (2002)

by A W Appel, N Michael, A Stump, R Virga