Should your specification language be typed (1999)

by Leslie Lamport, Lawrence C Paulson
Venue:ACM Transactions on Programming Languages and Systems (TOPLAS