S.: Piton: a mechanically verified assembly-level language (1996)

by J Moore