Towards imperative modules: Reasoning about invariants and sharing of mutable state (2004)

by D A Naumann, M Barnett
Venue:In 19th LICS