How to Believe a Machine-Checked Proof (1997)

An Adequate Left-Associated Binary Numeral System in the lambda-Calculus

The Pointer Assertion Logic Engine