The formal verification of a proof checker. SRI internal report (1994)

by J von Wright