Should your specification language be typed (1999)

by L Lamport, L C Paulson
Venue:ACM Transactions on Programming Languages and Systems