Ian A. Mason

• Hoare's logic in the L.F.
• Semantics Destructive Lisp
• The semantics of destructive Lisp
• Verification of programs that destructively manipulate data