Proving the correctness of reactive systems using sized types (1996)

by J Hughes, L Pareto, A Sabry
Venue:in: POPL: Principles of Programming Languages, ACM