A Two-Level Approach towards Lean Proof-Checking (1996)

by Gilles Barthe, Mark Ruys, Henk Barendregt