Constructive Data Refinement in Typed Lambda Calculus (2000)

by Furio Honsell, John Longley, Donald Sannella, Andrzej Tarlecki