proof-engineering.bib

@incollection{Wenzel2015,
  author = {Wenzel, Makarius},
  title = {Interactive Theorem Proving from the perspective of {Isabelle/Isar}},
  editor = {Woltzenlogel Paleo, Bruno and Delahaye, David},
  booktitle = {All about Proofs, Proofs for All},
  publisher = {College Publications},
  address = {London, UK},
  year = {2015},
  volume = {55},
  series = {Mathematical Logic and Foundations},
  keywords = {foundations, proof-development}
}

@InProceedings{Gordon1993b,
author="Gordon, Andrew D.",
SKIPeditor="Joyce, Jeffrey J.
and Seger, Carl-Johan H.",
title="A mechanisation of name-carrying syntax up to alpha-conversion",
booktitle="Higher Order Logic Theorem Proving and Its Applications",
year="1994",
publisher="Springer",
address="Berlin, Heidelberg",
pages="413--425",
isbn="978-3-540-48346-5",
doi = "10.1007/3-540-57826-9_152",
keywords = {applications, proof-organization},
}

@book{Filman2004,
 author = {Filman, Robert and Elrad, Tzilla and Clarke, Siobh\'{a}n and Ak\c{s}it, Mehmet},
 title = {Aspect-oriented Software Development},
 year = {2004},
 isbn = {0321219767},
 edition = {First},
 publisher = {Addison-Wesley Professional},
} 

@book{Anderson2014,
 author = {Anderson, Thomas and Dahlin, Michael},
 title = {Operating Systems: Principles and Practice},
 year = {2014},
 isbn = {0985673524, 9780985673529},
 edition = {2nd},
 publisher = {Recursive books},
} 

@book{cooper2011engineering,
  title={Engineering a compiler},
  author={Cooper, Keith and Torczon, Linda},
  year={2011},
  publisher={Elsevier},
  doi={10.1016/C2009-0-27982-7},
}

@book{Cachin2011,
 author = {Cachin, Christian and Guerraoui, Rachid and Rodrigues, Lus},
 title = {Introduction to Reliable and Secure Distributed Programming},
 year = {2011},
 isbn = {3642152597, 9783642152597},
 edition = {2nd},
 publisher = {Springer},
 doi = {10.1007/978-3-642-15260-3},
}

@misc{coq-critical,
  author={{Coq Development Team}},
  title={Preliminary compilation of critical bugs in stable releases of {Coq}},
  url={http://github.com/coq/coq/blob/master/dev/doc/critical-bugs},
  year={2018-2019},
  accessed={June 26th, 2019}
}

@misc{se-canon,
  author={Shaw, Mary and Aldrich, Jonathan and Breaux, Travis D. and Garlan, David and K\"{a}stner, Christian and Le Goues, Claire and Scherlis, William L.},
  title={Seminal Papers in Software Engineering: The Carnegie Mellon Canonical Collection},
  url={http://reports-archive.adm.cs.cmu.edu/anon/isr2015/CMU-ISR-15-107.pdf},
  year={2015},
  accessed={July 2nd, 2019}
}

@misc{pumpkin-git,
  title={PUMPKIN-git},
  author={Ringer, Talia and Yazdani, Nathaniel},
  url={http://github.com/uwplse/PUMPKIN-git},
  year={2018},
  accessed={February 3rd, 2019}
}

@misc{coq-classroom,
  title={CoqInTheClassroom},
  author={{Coq Development Team}},
  url={http://github.com/coq/coq/wiki/CoqInTheClassroom},
  year={2017-2019},
  accessed={June 26th, 2019}
}

@misc{popl-time,
  title={Most Influential POPL Paper Award},
  author={{ACM SIGPLAN}},
  url={http://www.sigplan.org/Awards/POPL},
  year={2016},
  accessed={June 12th, 2019}
}

@misc{mechanized-sml,
  title={The Mechanization of Standard ML},
  author={Crary, Karl and Harper, Robert},
  url={http://github.com/SMLFamily/The-Mechanization-of-Standard-ML},
  year={2014},
  accessed={June 17th, 2019}
}

@misc{pfenning2010curry,
  title={Lecture Notes on Proofs as Programs: Lecture 2},
  author={Pfenning, Frank},
  url={http://www.cs.cmu.edu/~fp/courses/15816-s10/lectures/02-pap.pdf},
  year={2010},
  accessed={June 30th, 2019}
}

@book{sorensen2006lectures,
  title={Lectures on the Curry-Howard isomorphism},
  author={S{\o}rensen, Morten Heine and Urzyczyn, Pawel},
  volume={149},
  year={2006},
  publisher={Elsevier},
  isbn={978-0-444-52077-7},
}

@article{debruijn1972,
title = "Lambda calculus notation with nameless dummies, a tool for automatic formula manipulation, with application to the {Church-Rosser} theorem",
journal = "Indagationes Mathematicae (Proceedings)",
volume = "75",
number = "5",
pages = "381--392",
year = "1972",
issn = "1385-7258",
doi = "10.1016/1385-7258(72)90034-0",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/1385725872900340",
author = "de Bruijn, N. G.",
keywords = {applications, proof-organization}
}

@misc{agda-prelude,
  title={agda-prelude},
  author={Norell, Ulf},
  url={http://github.com/UlfNorell/agda-prelude},
  year={2015-2019},
  accessed={February 9th, 2019}
}

@article{Monperrus2018,
 author = {Monperrus, Martin},
 title = {Automatic Software Repair: A Bibliography},
 journal = {ACM Comput. Surv.},
 issue_date = {April 2018},
 volume = {51},
 number = {1},
 month = jan,
 year = {2018},
 issn = {0360-0300},
 pages = {17:1--17:24},
 articleno = {17},
 numpages = {24},
 SKIPurl = {http://doi.acm.org/10.1145/3105906},
 doi = {10.1145/3105906},
 acmid = {3105906},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {Program repair, self-healing software},
} 

@phdthesis{robert2018,
  title={Front-end tooling for building and maintaining dependently-typed functional programs},
  author={Robert, Valentin},
  year={2018},
  school={UC San Diego}
}

@InProceedings{Bundy1998,
author="Bundy, Alan",
SKIPeditor="Lusk, Ewing
and Overbeek, Ross",
title="The use of explicit plans to guide inductive proofs",
booktitle="9th International Conference on Automated Deduction",
year="1988",
publisher="Springer",
address="Berlin, Heidelberg",
pages="111--120",
isbn="978-3-540-39216-3",
doi="10.1007/BFb0012826",
}

@phdthesis{dietrich2011,
  title={Assertion level proof planning with compiled strategies},
  author={Dietrich, Dominik},
  year={2011},
  institution = {Universit\"at des Saarlandes},
}

@phdthesis{opdyke1992,
  title={Refactoring: A program restructuring aid in designing object-oriented application frameworks},
  author={Opdyke, William F},
  year={1992},
  institution={University of Illinois at Urbana-Champaign}
}

@book{de1998data,
  title={Data refinement: model-oriented proof methods and their comparison},
  author={De Roever, Willem-Paul and Engelhardt, Kai and Buth, Karl-Heinz},
  volume={47},
  year={1998},
  publisher={Cambridge University Press}
}

@inproceedings{Elphinstone2013,
 author = {Elphinstone, Kevin and Heiser, Gernot},
 title = {From L3 to seL4 What Have We Learnt in 20 Years of L4 Microkernels?},
 booktitle = {Proceedings of the Twenty-Fourth ACM Symposium on Operating Systems Principles},
 series = {SOSP '13},
 year = {2013},
 isbn = {978-1-4503-2388-8},
 location = {Farminton, Pennsylvania},
 pages = {133--150},
 numpages = {18},
 SKIPurl = {http://doi.acm.org/10.1145/2517349.2522720},
 doi = {10.1145/2517349.2522720},
 acmid = {2522720},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@article{MouraAKR15,
  author    = {Leonardo de Moura and
               Jeremy Avigad and
               Soonho Kong and
               Cody Roux},
  title     = {Elaboration in Dependent Type Theory},
  journal   = {CoRR},
  volume    = {abs/1505.04324},
  year      = {2015},
  SKIPurl       = {http://arxiv.org/abs/1505.04324},
  archivePrefix = {arXiv},
  eprint    = {1505.04324},
  timestamp = {Mon, 13 Aug 2018 16:48:06 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/corr/MouraAKR15},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{Qi2015,
 author = {Qi, Zichao and Long, Fan and Achour, Sara and Rinard, Martin},
 title = {An Analysis of Patch Plausibility and Correctness for Generate-and-validate Patch Generation Systems},
 booktitle = {Proceedings of the 2015 International Symposium on Software Testing and Analysis},
 series = {ISSTA 2015},
 year = {2015},
 isbn = {978-1-4503-3620-8},
 location = {Baltimore, MD, USA},
 pages = {24--36},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/2771783.2771791},
 doi = {10.1145/2771783.2771791},
 acmid = {2771791},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {Automatic Repair, Function Elimination, Patch Analysis},
} 

@misc{emacs,
  title={{GNU} Emacs},
  author={{GNU Project}},
  year={1985-2019},
  url={http://www.gnu.org/software/emacs/},
  accessed={June 24th, 2019},
  keywords = {proof-development}
}

@misc{atom,
  title={Atom},
  author={{GitHub}},
  year={2014-2019},
  url={http://atom.io/},
  accessed={June 24th, 2019},
  keywords={proof-development}
}

@misc{vscode,
   title={{Visual Studio}},
   author={Microsoft},
   year={1997-2019},
   url={http://visualstudio.microsoft.com/},
   accessed={June 24th, 2019}
}

@misc{intellij,
  title={{IntelliJ IDEA}},
  author={{JetBrains}},
  year={2001-2019},
  url={http://www.jetbrains.com/idea/},
  accessed={June 24th, 2019}
}

@misc{eclipse,
  title={Eclipse},
  author={{Eclipse Foundation}},
  year={2001-2019},
  url={http://www.eclipse.org/ide/},
  accessed={June 24th, 2019}
}

@misc{isamode,
  title={Isamode},
  author={Aspinall, David},
  year={2000},
  url={https://homepages.inf.ed.ac.uk/da/Isamode/doc/Isamode_toc.html},
  accessed={February 7th, 2019}
}

@misc{lean-tutorial,
  title={Theorem Proving in Lean},
  author={{Lean Development Team}},
  year={2014-2017},
  url={http://leanprover.github.io/tutorial/},
  accessed={February 7th, 2019}
}

@misc{lean-js,
  title={Javascript interface to the Lean server},
  author={{Lean Development Team}},
  year={2017-2018},
  url={http://github.com/leanprover/lean-client-js},
  accessed={February 7th, 2019}
}

@misc{lean-vscode,
  title={Lean for VS Code},
  author={{Lean Development Team}},
  year={2016-2019},
  url={http://github.com/leanprover/vscode-lean},
  accessed={February 7th, 2019}
}

@misc{isabelle-vscode,
  title = {Visual Studio Code as Prover {IDE} for {Isabelle}},
  url={https://sketis.net/2017/visual-studio-code-as-prover-ide-for-isabelle},
  author = {Makarius Wenzel},
  year = {2017},
  accessed={February 11th, 2019}
}

@misc{peacoq,
  title={PeaCoq},
  author={Robert, Valentin and Lerner, Sorin},
  year={2014-2016},
  url={http://goto.ucsd.edu/peacoq/},
  accessed={February 7th, 2019}
}

@article{mehnert2014tool,
  title={Tool Demonstration: An IDE for Programming and Proving in Idris},
  author={Mehnert, Hannes and Christiansen, David},
  journal={Proceedings of Vienna Summer of Logic, VSL},
  volume={14},
  pages={2},
  year={2014}
}

@article{tabareau2018,
 author = {Tabareau, Nicolas and Tanter, \'{E}ric and Sozeau, Matthieu},
 title = {Equivalences for Free: Univalent Parametricity for Effective Transport},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {September 2018},
 volume = {2},
 number = {ICFP},
 month = jul,
 year = {2018},
 issn = {2475-1421},
 pages = {92:1--92:29},
 articleno = {92},
 numpages = {29},
 SKIPurl = {http://doi.acm.org/10.1145/3236787},
 doi = {10.1145/3236787},
 acmid = {3236787},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{cao2015practical,
 author = {Cao, Jingyuan and Fu, Ming and Feng, Xinyu},
 title = {Practical Tactics for Verifying {C} Programs in {Coq}},
 booktitle = {Proceedings of the 2015 Conference on Certified Programs and Proofs},
 series = {CPP '15},
 year = {2015},
 isbn = {978-1-4503-3296-5},
 location = {Mumbai, India},
 pages = {97--108},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2676724.2693162},
 doi = {10.1145/2676724.2693162},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{mccreight2009practical,
author="McCreight, Andrew",
SKIPeditor="Berghofer, Stefan
and Nipkow, Tobias
and Urban, Christian
and Wenzel, Makarius",
title="Practical Tactics for Separation Logic",
booktitle="Theorem Proving in Higher Order Logics",
year="2009",
publisher="Springer",
address="Berlin, Heidelberg",
pages="343--358",
isbn="978-3-642-03359-9",
doi="10.1007/978-3-642-03359-9_24",
}

@article{ohearn07resources,
title = "Resources, concurrency, and local reasoning",
journal = "Theoretical Computer Science",
volume = "375",
number = "1",
pages = "271--307",
year = "2007",
SKIPnote = "Festschrift for John C. Reynolds's 70th birthday",
issn = "0304-3975",
doi = "10.1016/j.tcs.2006.12.035",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S030439750600925X",
author = "O'Hearn, Peter W.",
}

@article{appel2006tactics,
  title={Tactics for separation logic},
  author={Appel, Andrew W.},
  journal={INRIA Rocquencourt and Princeton University, Early Draft},
  year={2006},
  url = {https://www.cs.princeton.edu/~appel/papers/septacs.pdf},
}

@InProceedings{barthe2002efficient,
author="Barthe, Gilles
and Courtieu, Pierre",
editor="Carre{\~{n}}o, Victor A.
and Mu{\~{n}}oz, C{\'e}sar A.
and Tahar, Sofi{\`e}ne",
title="Efficient Reasoning about Executable Specifications in {Coq}",
booktitle="Theorem Proving in Higher Order Logics",
year="2002",
publisher="Springer",
address="Berlin, Heidelberg",
pages="31--46",
isbn="978-3-540-45685-8",
doi="10.1007/3-540-45685-6_4",
}

@InProceedings{narboux2004,
author="Narboux, Julien",
SKIPeditor="Slind, Konrad
and Bunker, Annette
and Gopalakrishnan, Ganesh",
title="A Decision Procedure for Geometry in {Coq}",
booktitle="Theorem Proving in Higher Order Logics",
year="2004",
publisher="Springer",
address="Berlin, Heidelberg",
pages="225--240",
isbn="978-3-540-30142-4",
doi="10.1007/978-3-540-30142-4_17",
}

@article{braibant2010,
  TITLE = {Deciding {Kleene} Algebras in {Coq}},
  AUTHOR = {Braibant, Thomas and Pous, Damien},
  URL = {https://lmcs.episciences.org/1043},
  DOI = {10.2168/LMCS-8(1:16)2012},
  JOURNAL = {{Logical Methods in Computer Science}},
  VOLUME = {{Volume 8, Issue 1}},
  YEAR = {2012},
  MONTH = Mar,
}

@InProceedings{slind1994ac,
author="Slind, Konrad",
editor="Joyce, Jeffrey J.
and Seger, Carl-Johan H.",
title="{AC} unification in {HOL90}",
booktitle="Higher Order Logic Theorem Proving and Its Applications",
year="1994",
publisher="Springer",
address="Berlin, Heidelberg",
pages="437--449",
isbn="978-3-540-48346-5",
doi="10.1007/3-540-57826-9_154",
}

@INPROCEEDINGS{nipkow1990,
author={Nipkow, Tobias},
booktitle={[1990] Proceedings. Fifth Annual IEEE Symposium on Logic in Computer Science},
title={Proof transformations for equational theories},
year={1990},
pages={278--288},
doi={10.1109/LICS.1990.113754},
month={June},
}

@InProceedings{gregoire2005,
author="Gr{\'e}goire, Benjamin
and Mahboubi, Assia",
editor="Hurd, Joe
and Melham, Tom",
title="Proving Equalities in a Commutative Ring Done Right in {Coq}",
booktitle="Theorem Proving in Higher Order Logics",
year="2005",
publisher="Springer",
address="Berlin, Heidelberg",
pages="98--113",
isbn="978-3-540-31820-0",
doi="10.1007/11541868_7",
}

@inproceedings{Kaliszyk2016,
 author = {Kaliszyk, Cezary and P\k{a}k, Karol and Urban, Josef},
 title = {Towards a {Mizar} Environment for {Isabelle}: Foundations and Language},
 booktitle = {Proceedings of the 5th ACM SIGPLAN Conference on Certified Programs and Proofs},
 series = {CPP 2016},
 year = {2016},
 isbn = {978-1-4503-4127-1},
 location = {St. Petersburg, FL, USA},
 pages = {58--65},
 numpages = {8},
 SKIPurl = {http://doi.acm.org/10.1145/2854065.2854070},
 doi = {10.1145/2854065.2854070},
 acmid = {2854070},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {Isabelle, Isar, Mizar, object logic},
} 

@inproceedings{siek2006semantic,
  title={A semantic analysis of {C++} templates},
  author={Siek, Jeremy and Taha, Walid},
  booktitle={European Conference on Object-Oriented Programming},
  pages={304--327},
  year={2006},
  organization={Springer}
}

@misc{wenzel2004isabelle,
  title={The {Isabelle/Isar} reference manual},
  author={Wenzel, Makarius and others},
  year={2004}
}

@article{lampropoulos2017generating,
 author = {Lampropoulos, Leonidas and Paraskevopoulou, Zoe and Pierce, Benjamin C.},
 title = {Generating Good Generators for Inductive Relations},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {January 2018},
 volume = {2},
 number = {POPL},
 month = dec,
 year = {2017},
 issn = {2475-1421},
 pages = {45:1--45:30},
 articleno = {45},
 numpages = {30},
 SKIPurl = {http://doi.acm.org/10.1145/3158133},
 doi = {10.1145/3158133},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{kaliszyk2007web,
title = "Web Interfaces for Proof Assistants",
journal = "Electronic Notes in Theoretical Computer Science",
volume = "174",
number = "2",
pages = "49--61",
year = "2007",
note = "Proceedings of the 7th Workshop on User Interfaces for Theorem Provers (UITP 2006)",
issn = "1571-0661",
doi = "10.1016/j.entcs.2006.09.021",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S1571066107001697",
author = "Cezary Kaliszyk",
}

@InProceedings{harrison-mizar,
author="Harrison, John",
SKIPeditor="Goos, Gerhard
and Hartmanis, Juris
and van Leeuwen, Jan
and von Wright, Joakim
and Grundy, Jim
and Harrison, John",
title="A {Mizar} mode for {HOL}",
booktitle="Theorem Proving in Higher Order Logics",
year="1996",
publisher="Springer",
address="Berlin, Heidelberg",
pages="203--220",
isbn="978-3-540-70641-0",
doi="10.1007/BFb0105406",
}

@inproceedings{Bulwahn2012b,
 author = {Bulwahn, Lukas},
 title = {The New {Quickcheck} for {Isabelle}: Random, Exhaustive and Symbolic Testing Under One Roof},
 booktitle = {Proceedings of the Second International Conference on Certified Programs and Proofs},
 series = {CPP'12},
 year = {2012},
 isbn = {978-3-642-35307-9},
 location = {Kyoto, Japan},
 pages = {92--108},
 numpages = {17},
 SKIPurl = {http://dx.doi.org/10.1007/978-3-642-35308-6_10},
 doi = {10.1007/978-3-642-35308-6_10},
 acmid = {2428355},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
}

@Article{rudnicki1985proving,
author="Rudnicki, Piotr
and Drabent, W{\l}odzimierz",
title="Proving properties of Pascal programs in MIZAR 2",
journal="Acta Informatica",
year="1985",
month="Aug",
day="01",
volume="22",
number="3",
pages="311--331",
issn="1432-0525",
doi="10.1007/BF00265684",
SKIPurl="https://doi.org/10.1007/BF00265684"
}

@misc{cornes1995coq,
  title={The {Coq} Proof assistant, Reference Manual, Version 5.10},
  author={Cornes, Cristina and Courant, Judica{\"e}l and Filli{\^a}tre, Jean-Christophe and Huet, G{\'e}rard and Manoury, Pascal and Munoz, C{\'e}sar and Murthy, Chetan and Parent, Catherine and Paulin-Mohring, Christine and Saibi, Amokrane and others},
  year={1995},
}

@Article{asperti2007user,
author="Asperti, Andrea
and Sacerdoti Coen, Claudio
and Tassi, Enrico
and Zacchiroli, Stefano",
title="User Interaction with the {Matita} Proof Assistant",
journal="Journal of Automated Reasoning",
year="2007",
month="Aug",
day="01",
volume="39",
number="2",
pages="109--139",
issn="1573-0670",
doi="10.1007/s10817-007-9070-5",
SKIPurl="https://doi.org/10.1007/s10817-007-9070-5"
}

@InProceedings{barthe1995implicit,
author="Barthe, Gilles",
SKIPeditor="Berardi, Stefano
and Coppo, Mario",
title="Implicit coercions in type systems",
booktitle="Types for Proofs and Programs",
year="1996",
publisher="Springer Berlin Heidelberg",
address="Berlin, Heidelberg",
pages="1--15",
isbn="978-3-540-70722-6",
doi="10.1007/3-540-61780-9_58",
}

@article{aspinall1996subtyping,
title = "Subtyping dependent types",
journal = "Theoretical Computer Science",
volume = "266",
number = "1",
pages = "273--309",
year = "2001",
issn = "0304-3975",
doi = "10.1016/S0304-3975(00)00175-4",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0304397500001754",
author = "David Aspinall and Adriana Compagnoni",
}

@InProceedings{asperti2004content,
author="Asperti, Andrea
and Guidi, Ferruccio
and Coen, Claudio Sacerdoti
and Tassi, Enrico
and Zacchiroli, Stefano",
SKIPeditor="Filli{\^a}tre, Jean-Christophe
and Paulin-Mohring, Christine
and Werner, Benjamin",
title="A Content Based Mathematical Search Engine: {Whelp}",
booktitle="Types for Proofs and Programs",
year="2006",
publisher="Springer",
address="Berlin, Heidelberg",
pages="17--32",
isbn="978-3-540-31429-5",
doi="10.1007/11617990_2",
}

@inproceedings{pientka2008programming,
 author = {Pientka, Brigitte and Dunfield, Joshua},
 title = {Programming with Proofs and Explicit Contexts},
 booktitle = {Proceedings of the 10th International ACM SIGPLAN Conference on Principles and Practice of Declarative Programming},
 series = {PPDP '08},
 year = {2008},
 isbn = {978-1-60558-117-0},
 location = {Valencia, Spain},
 pages = {163--173},
 numpages = {11},
 SKIPurl = {http://doi.acm.org/10.1145/1389449.1389469},
 doi = {10.1145/1389449.1389469},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{nanevski2008contextual,
 author = {Nanevski, Aleksandar and Pfenning, Frank and Pientka, Brigitte},
 title = {Contextual Modal Type Theory},
 journal = {ACM Trans. Comput. Logic},
 issue_date = {June 2008},
 volume = {9},
 number = {3},
 month = jun,
 year = {2008},
 issn = {1529-3785},
 pages = {23:1--23:49},
 articleno = {23},
 numpages = {49},
 SKIPurl = {http://doi.acm.org/10.1145/1352582.1352591},
 doi = {10.1145/1352582.1352591},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{poswolsky2009system,
  title={System description: {Delphin}--a functional programming language for deductive systems},
  author={Poswolsky, Adam and Sch{\"u}rmann, Carsten},
  journal={Electronic Notes in Theoretical Computer Science},
  volume={228},
  pages={113--120},
  year={2009},
  publisher={Elsevier}
}

@inproceedings{Stampoulis2010,
 author = {Stampoulis, Antonis and Shao, Zhong},
 title = {{VeriML}: Typed Computation of Logical Terms Inside a Language with Effects},
 booktitle = {Proceedings of the 15th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '10},
 year = {2010},
 isbn = {978-1-60558-794-3},
 location = {Baltimore, Maryland, USA},
 pages = {333--344},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/1863543.1863591},
 doi = {10.1145/1863543.1863591},
 acmid = {1863591},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{ziliani2016next,
  title={The next 700 safe tactic languages},
  author={Ziliani, Beta and R{\'e}gis-Gianas, Yann and Kaiser, Jan-Oliver},
  journal={Submitted for publication},
  year={2016}
}

@Article{Matichuk2015EisbachAP,
author="Matichuk, Daniel
and Murray, Toby
and Wenzel, Makarius",
title="Eisbach: A Proof Method Language for {Isabelle}",
journal="Journal of Automated Reasoning",
year="2016",
month="Mar",
day="01",
volume="56",
number="3",
pages="261--282",
issn="1573-0670",
doi="10.1007/s10817-015-9360-2",
SKIPurl="https://doi.org/10.1007/s10817-015-9360-2"
}

@article{brady2013idris,
  title={Idris, a general-purpose dependently typed programming language: Design and implementation},
  author={Brady, Edwin},
  journal={Journal of Functional Programming},
  volume={23},
  number={5},
  pages={552--593},
  year={2013},
  doi={10.1017/S095679681300018X},
  publisher={Cambridge University Press}
}

@inproceedings{Christiansen2016,
 author = {Christiansen, David and Brady, Edwin},
 title = {Elaborator Reflection: Extending {Idris} in {Idris}},
 booktitle = {Proceedings of the 21st ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP 2016},
 year = {2016},
 isbn = {978-1-4503-4219-3},
 location = {Nara, Japan},
 pages = {284--297},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/2951913.2951932},
 doi = {10.1145/2951913.2951932},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{fallenstein2015proof,
author="Fallenstein, Benja
and Kumar, Ramana",
SKIPeditor="Urban, Christian
and Zhang, Xingyuan",
title="Proof-Producing Reflection for {HOL}",
booktitle="Interactive Theorem Proving",
year="2015",
publisher="Springer",
address="Cham",
pages="170--186",
isbn="978-3-319-22102-1",
doi="10.1007/978-3-319-22102-1_11",
}

@techreport{paulson1983tactics,
  title={Tactics and tacticals in {Cambridge LCF}},
  author={Paulson, Lawrence},
  year={1983},
  institution={University of Cambridge, Computer Laboratory}
}

@techreport{paulson1988preliminary,
  title={A preliminary users manual for {Isabelle}},
  author={Paulson, Lawrence C},
  year={1988},
  institution={University of Cambridge, Computer Laboratory}
}

@article{darmochwal1990finite,
  title={Finite sets},
  author={Darmochwa{\l}, Agata},
  journal={Formalized Mathematics},
  volume={1},
  number={1},
  pages={165--167},
  year={1990},
  url = {http://mizar.org/JFM/Vol1/finset_1.html},
}

@article{bancerek1990fundamental,
  title={The fundamental properties of natural numbers},
  author={Bancerek, Grzegorz},
  journal={Formalized Mathematics},
  volume={1},
  number={1},
  pages={41--46},
  year={1990},
  publisher={Citeseer}
}

@incollection{zucker1994formalization,
title = "Formalization of Classical Mathematics in {Automath}",
editor = "R.P. Nederpelt and J.H. Geuvers and R.C. de Vrijer",
series = "Studies in Logic and the Foundations of Mathematics",
publisher = "Elsevier",
volume = "133",
pages = "127--139",
year = "1994",
booktitle = "Selected Papers on Automath",
issn = "0049-237X",
doi = "10.1016/S0049-237X(08)70202-7",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0049237X08702027",
author = "Jeff Zucker",
}

@incollection{van1994checking,
title = "Checking {Landau's} Grundlagen in the {Automath} System: Parts of Chapters 0, 1 and 2 (Introduction, Prepration, Translation)",
editor = "R.P. Nederpelt and J.H. Geuvers and R.C. de Vrijer",
series = "Studies in Logic and the Foundations of Mathematics",
publisher = "Elsevier",
volume = "133",
pages = "701--720",
year = "1994",
booktitle = "Selected Papers on Automath",
issn = "0049-237X",
doi = "10.1016/S0049-237X(08)70222-2",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0049237X08702222",
author={van Benthem Jutting, Lambert S},
}

@techreport{jackson1995enhancing,
  title={Enhancing the {Nuprl} Proof Development System and Applying it to Computational Abstract Algebra},
  author={Jackson, Paul B},
  year={1995},
  institution={Cornell University}
}

@InProceedings{howe1988computational,
author="Howe, Douglas J.",
SKIPeditor="Lusk, Ewing
and Overbeek, Ross",
title="Computational metatheory in {Nuprl}",
booktitle="9th International Conference on Automated Deduction",
year="1988",
publisher="Springer",
address="Berlin, Heidelberg",
pages="238--257",
isbn="978-3-540-39216-3",
doi="10.1007/BFb0012835",
}

@inproceedings{qed-manifesto-boyer-cade94,
  author = {Boyer, Robert S.},
  SKIPeditor = {Bundy, Alan},
  title = {A mechanically proof-checked encyclopedia of mathematics: Should we build one? Can we?},
  bookTitle = {Automated Deduction --- CADE-12: 12th International Conference on Automated Deduction Nancy, France, June 26 -- July 1, 1994 Proceedings},
  year = {1994},
  publisher = {Springer},
  address = {Berlin, Heidelberg},
  pages = {237--251},
  isbn = {978-3-540-48467-7},
  doi = {10.1007/3-540-58156-1_17},
  SKIPurl = {http://dx.doi.org/10.1007/3-540-58156-1_17},
  keywords = {foundations}
}

@periodical{ams-proof,
  author={{American Mathematical Society}},
  editor = {Magid, Andy},
  year = {2008},
  title = {Notives of the American Mathematical Society},
  issuetitle = {A Special Issue on Formal Proof},
  url = {http://www.ams.org/notices/200811/},
}

@article{pa-history-geuvers-sadhana09,
  author = {Geuvers, H.},
  title = {Proof assistants: History, ideas and future},
  journal = {Sadhana},
  year = {2009},
  volume = {34},
  number = {1},
  pages = {3--25},
  issn = {0973-7677},
  doi = {10.1007/s12046-009-0001-5},
  SKIPurl = {http://dx.doi.org/10.1007/s12046-009-0001-5},
  keywords = {foundations}
}

@inproceedings{plse-coevolve-djg-fose14,
  author = {Murphy-Hill, Emerson and Grossman, Dan},
  title = {How Programming Languages Will Co-evolve with Software Engineering: A Bright Decade Ahead},
  booktitle = {Proceedings of the on Future of Software Engineering},
  series = {FOSE 2014},
  year = {2014},
  isbn = {978-1-4503-2865-4},
  location = {Hyderabad, India},
  pages = {145--154},
  numpages = {10},
  SKIPurl = {http://doi.acm.org/10.1145/2593882.2593898},
  doi = {10.1145/2593882.2593898},
  acmid = {2593898},
  publisher = {ACM},
  address = {New York, NY, USA},
  keywords = {proof-organization},
}

@Inproceedings{Klein2014,
  author="Klein, Gerwin",
  SKIPeditor="Jones, Cliff and Pihlajasaari, Pekka and Sun, Jun",
  title="Proof Engineering Considered Essential",
  bookTitle="FM 2014: Formal Methods: 19th International Symposium, Singapore, May 12-16, 2014. Proceedings",
  year="2014",
  publisher="Springer International Publishing",
  address="Cham",
  pages="16--21",
  isbn="978-3-319-06410-9",
  doi="10.1007/978-3-319-06410-9_2",
  SKIPurl="http://dx.doi.org/10.1007/978-3-319-06410-9_2",
  keywords = {proof-development},
}

@Article{Faithfull2016,
author="Faithfull, Alexander
and Bengtson, Jesper
and Tassi, Enrico
and Tankink, Carst",
title="Coqoon: An {IDE} for interactive proof development in {Coq}",
journal="International Journal on Software Tools for Technology Transfer",
year="2018",
month="Apr",
day="01",
volume="20",
number="2",
pages="125--137",
issn="1433-2787",
doi="10.1007/s10009-017-0457-2",
SKIPurl="https://doi.org/10.1007/s10009-017-0457-2",
keywords = {proof-development},
}

@Inproceedings{Barras2015,
author="Barras, Bruno
and Tankink, Carst
and Tassi, Enrico",
SKIPeditor="Urban, Christian
and Zhang, Xingyuan",
title="Asynchronous Processing of {Coq} Documents: From the Kernel up to the User Interface",
bookTitle="Interactive Theorem Proving: 6th International Conference, ITP 2015, Nanjing, China, August 24-27, 2015, Proceedings",
year="2015",
publisher="Springer International Publishing",
address="Cham",
pages="51--66",
isbn="978-3-319-22102-1",
doi="10.1007/978-3-319-22102-1_4",
SKIPurl="http://dx.doi.org/10.1007/978-3-319-22102-1_4",
keywords = {proof-development},
}

@Inproceedings{Wenzel2014,
author="Wenzel, Makarius",
SKIPeditor="Klein, Gerwin
and Gamboa, Ruben",
title="Asynchronous User Interaction and Tool Integration in {Isabelle/PIDE}",
bookTitle="Interactive Theorem Proving: 5th International Conference, ITP 2014, Held as Part of the Vienna Summer of Logic, VSL 2014, Vienna, Austria, July 14-17, 2014. Proceedings",
year="2014",
publisher="Springer International Publishing",
address="Cham",
pages="515--530",
isbn="978-3-319-08970-6",
doi="10.1007/978-3-319-08970-6_33",
SKIPurl="http://dx.doi.org/10.1007/978-3-319-08970-6_33",
keywords = {proof-development},
}

@article{Wenzel2013,
  author    = {Makarius Wenzel},
  title     = {{PIDE} as front-end technology for {Coq}},
  journal   = {CoRR},
  volume    = {abs/1304.6626},
  archivePrefix = {arXiv},
  year      = {2013},
  SKIPurl       = {http://arxiv.org/abs/1304.6626},
  eprint    = {1304.6626},
  keywords = {proof-development}
}

@Inproceedings{Barras2013,
author="Barras, Bruno
and del Carmen Gonz{\'a}lez Huesca, Lourdes
and Herbelin, Hugo
and R{\'e}gis-Gianas, Yann
and Tassi, Enrico
and Wenzel, Makarius
and Wolff, Burkhart",
SKIPeditor="Carette, Jacques
and Aspinall, David
and Lange, Christoph
and Sojka, Petr
and Windsteiger, Wolfgang",
title="Pervasive Parallelism in Highly-Trustable Interactive Theorem Proving Systems",
bookTitle="Intelligent Computer Mathematics: MKM, Calculemus, DML, and Systems and Projects 2013, Held as Part of CICM 2013, Bath, UK, July 8-12, 2013. Proceedings",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="359--363",
isbn="978-3-642-39320-4",
doi="10.1007/978-3-642-39320-4_29",
SKIPurl="http://dx.doi.org/10.1007/978-3-642-39320-4_29",
keywords = {proof-development},
}

@INPROCEEDINGS{Matichuk2015,
  author={D. Matichuk and T. Murray and J. Andronick and R. Jeffery and G. Klein and M. Staples},
  booktitle={2015 IEEE/ACM 37th IEEE International Conference on Software Engineering},
  title={Empirical Study Towards a Leading Indicator for Cost of Formal Software Verification},
  year={2015},
  volume={1},
  pages={722--732},
  doi={10.1109/ICSE.2015.85},
  ISSN={0270-5257},
  month={May},
  keywords = {proof-development}
}

@article{Jeffery2015,
title = "An empirical research agenda for understanding formal methods productivity",
journal = "Information and Software Technology",
volume = "60",
pages = "102--112",
year = "2015",
issn = "0950-5849",
doi = "10.1016/j.infsof.2014.11.005",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0950584914002511",
author = "Ross Jeffery and Mark Staples and June Andronick and Gerwin Klein and Toby Murray",
keywords = {proof-development},
}

@inproceedings{Staples2014,
 author = {Staples, Mark and Jeffery, Ross and Andronick, June and Murray, Toby and Klein, Gerwin and Kolanski, Rafal},
 title = {Productivity for Proof Engineering},
 booktitle = {Proceedings of the 8th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement},
 series = {ESEM '14},
 year = {2014},
 isbn = {978-1-4503-2774-9},
 location = {Torino, Italy},
 pages = {15:1--15:4},
 articleno = {15},
 numpages = {4},
 SKIPurl = {http://doi.acm.org/10.1145/2652524.2652551},
 doi = {10.1145/2652524.2652551},
 acmid = {2652551},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {formal verification, productivity, proof engineering, proof sizing},
}

@inproceedings{Staples2013,
 author = {Staples, Mark and Kolanski, Rafal and Klein, Gerwin and Lewis, Corey and Andronick, June and Murray, Toby and Jeffery, Ross and Bass, Len},
 title = {Formal Specifications Better Than Function Points for Code Sizing},
 booktitle = {Proceedings of the 2013 International Conference on Software Engineering},
 series = {ICSE '13},
 year = {2013},
 isbn = {978-1-4673-3076-3},
 location = {San Francisco, CA, USA},
 pages = {1257--1260},
 numpages = {4},
 doi={10.1109/ICSE.2013.6606692},
 publisher = {IEEE Press},
 address = {Piscataway, NJ, USA},
 keywords = {proof-development},
} 

@inproceedings{Andronick2012,
   publisher        = {ACM},
   author           = {Andronick, June and Jeffery, Ross and Klein, Gerwin and Kolanski, Rafal and Staples, Mark and Zhang, He and Zhu, Liming},
   month            = jun,
   year             = {2012},
   title            = {Large-Scale Formal Verification in Practice: A Process Perspective},
   booktitle        = {International Conference on Software Engineering},
   pages            = {1002--1011},
   address          = {Zurich, Switzerland},
   doi = {10.1109/ICSE.2012.6227120},
   keywords = {proof-development},
}
   
@inproceedings{Zhang2012,
    publisher        = {IEEE},
    isbn             = {978-1-4673-2351-2},
    author           = {Zhang, He and Klein, Gerwin and Staples, Mark and Andronick, June and Zhu, Liming and
                        Kolanski, Rafal},
    month            = jun,
    SKIPeditor           = {{Ross Jeffery, David Raffo, Ove Armbrust, Li Guo Huang}},
    year             = {2012},
    title            = {Simulation Modeling of A Large Scale Formal Verification Process},
    booktitle        = {International Conference on Software and Systems Process},
    pages            = {3--12},
    address          = {Zurich, Switzerland},
    doi = {10.1109/ICSSP.2012.6225979},
    keywords = {proof-development},
  }

@inproceedings{Klein2009,
 author = {Klein, Gerwin and Elphinstone, Kevin and Heiser, Gernot and Andronick, June and Cock, David and Derrin, Philip and Elkaduwe, Dhammika and Engelhardt, Kai and Kolanski, Rafal and Norrish, Michael and Sewell, Thomas and Tuch, Harvey and Winwood, Simon},
 title = {{seL4}: Formal Verification of an {OS} Kernel},
 booktitle = {Proceedings of the ACM SIGOPS 22Nd Symposium on Operating Systems Principles},
 series = {SOSP '09},
 year = {2009},
 isbn = {978-1-60558-752-3},
 location = {Big Sky, Montana, USA},
 pages = {207--220},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/1629575.1629596},
 doi = {10.1145/1629575.1629596},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization, proof-development, case-study},
}

@article{Leroy2009,
 author = {Leroy, Xavier},
 title = {Formal Verification of a Realistic Compiler},
 journal = {Commun. ACM},
 issue_date = {July 2009},
 volume = {52},
 number = {7},
 month = jul,
 year = {2009},
 issn = {0001-0782},
 pages = {107--115},
 numpages = {9},
 SKIPurl = {http://doi.acm.org/10.1145/1538788.1538814},
 doi = {10.1145/1538788.1538814},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization, proof-development, case-study}
} 

@Inproceedings{Gonthier2013,
author="Gonthier, Georges
and Asperti, Andrea
and Avigad, Jeremy
and Bertot, Yves
and Cohen, Cyril
and Garillot, Fran{\c{c}}ois
and Le Roux, St{\'e}phane
and Mahboubi, Assia
and O'Connor, Russell
and Ould Biha, Sidi
and Pasca, Ioana
and Rideau, Laurence
and Solovyev, Alexey
and Tassi, Enrico
and Th{\'e}ry, Laurent",
SKIPeditor="Blazy, Sandrine
and Paulin-Mohring, Christine
and Pichardie, David",
title="A Machine-Checked Proof of the Odd Order Theorem",
bookTitle="Interactive Theorem Proving: 4th International Conference, ITP 2013, Rennes, France, July 22-26, 2013. Proceedings",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="163--179",
isbn="978-3-642-39634-2",
doi="10.1007/978-3-642-39634-2_14",
SKIPurl="http://dx.doi.org/10.1007/978-3-642-39634-2_14",
keywords = {proof-organization, case-study},
}

@inproceedings{Malecha2010,
 author = {Malecha, Gregory and Morrisett, Greg and Shinnar, Avraham and Wisnesky, Ryan},
 title = {Toward a Verified Relational Database Management System},
 booktitle = {Proceedings of the 37th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '10},
 year = {2010},
 isbn = {978-1-60558-479-9},
 location = {Madrid, Spain},
 pages = {237--248},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/1706299.1706329},
 doi = {10.1145/1706299.1706329},
 acmid = {1706329},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization, case-study}
} 

@Inproceedings{Aspinall2000,
author="Aspinall, David",
SKIPeditor="Graf, Susanne
and Schwartzbach, Michael",
title="{Proof General}: A Generic Tool for Proof Development",
bookTitle="Tools and Algorithms for the Construction and Analysis of Systems: 6th International Conference, TACAS 2000 Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2000 Berlin, Germany, March 25 -- April 2, 2000 Proceedings",
year="2000",
publisher="Springer",
address="Berlin, Heidelberg",
pages="38--43",
isbn="978-3-540-46419-8",
doi="10.1007/3-540-46419-0_3",
SKIPurl="http://dx.doi.org/10.1007/3-540-46419-0_3",
keywords = {proof-development},
}

@article{Gonthier2008,
  author = {Gonthier, Georges},
  title = {Formal proof---the four-color theorem},
  journal = {Notices of the American Mathematical Society},
  pages = {1382--1393},
  year = {2008},
  volume = {55},
  number = {11},
  url = {http://www.ams.org/notices/200811/tx081101382p.pdf},
  keywords = {proof-organization, case-study},
}

@article{Hales2008,
  author = {Hales, Thomas C.},
  title = {Formal proof},
  journal = {Notices of the American Mathematical Society},
  pages = {1370--1381},
  year = {2008},
  volume = {55},
  number = {11},
  url = {http://www.ams.org/journals/notices/200811/tx081101370p.pdf},
  keywords = {foundations, proof-organization},
}

@article{Berghofer2007,
title = "A Head-to-Head Comparison of {de Bruijn} Indices and Names",
journal = "Electronic Notes in Theoretical Computer Science",
volume = "174",
number = "5",
pages = "53--67",
year = "2007",
note = "",
issn = "1571-0661",
doi = "10.1016/j.entcs.2007.01.018",
author = "Stefan Berghofer and Christian Urban",
keywords = {proof-organization},
}

@Inproceedings{Wenzel2013MultiProcessing,
author="Wenzel, Makarius",
SKIPeditor="Blazy, Sandrine
and Paulin-Mohring, Christine
and Pichardie, David",
title="Shared-Memory Multiprocessing for Interactive Theorem Proving",
bookTitle="Interactive Theorem Proving: 4th International Conference, ITP 2013, Rennes, France, July 22-26, 2013. Proceedings",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="418--434",
isbn="978-3-642-39634-2",
doi="10.1007/978-3-642-39634-2_30",
SKIPurl="http://dx.doi.org/10.1007/978-3-642-39634-2_30",
keywords = {proof-development}
}

@Inproceedings{Rager2013,
author="Rager, David L.
and Hunt, Warren A.
and Kaufmann, Matt",
SKIPeditor="Blazy, Sandrine
and Paulin-Mohring, Christine
and Pichardie, David",
title="A Parallelized Theorem Prover for a Logic with Parallel Execution",
bookTitle="Interactive Theorem Proving: 4th International Conference, ITP 2013, Rennes, France, July 22-26, 2013. Proceedings",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="435--450",
isbn="978-3-642-39634-2",
doi="10.1007/978-3-642-39634-2_31",
SKIPurl="http://dx.doi.org/10.1007/978-3-642-39634-2_31",
keywords = {proof-development}
}

@InProceedings{Geuvers2000,
author="Geuvers, Herman
and Wiedijk, Freek
and Zwanenburg, Jan",
SKIPeditor="Callaghan, Paul
and Luo, Zhaohui
and McKinna, James
and Pollack, Robert
and Pollack, Robert",
title="A Constructive Proof of the Fundamental Theorem of Algebra without Using the Rationals",
booktitle="Types for Proofs and Programs",
year="2002",
publisher="Springer",
address="Berlin, Heidelberg",
pages="96--111",
isbn="978-3-540-45842-5",
doi="10.1007/3-540-45842-5_7",
keywords = {proof-organization, case-study},
}

@article{CruzFilipe2006,
title = "A Large-Scale Experiment in Executing Extracted Programs",
journal = "Electronic Notes in Theoretical Computer Science",
volume = "151",
number = "1",
pages = "75--91",
year = "2006",
issn = "1571-0661",
doi = "10.1016/j.entcs.2005.11.024",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S1571066106001101",
author = "Lu{\'i}s Cruz-Filipe and Pierre Letouzey",
keywords = {proof-organization, case-study},
}

@article{DBLP:journals/corr/FleuriotOS16,
  author    = {Jacques D. Fleuriot and
               Steven Obua and
               Phil Scott},
  title     = {Social Network Processes in the {Isabelle} and {Coq} Theorem Proving Communities},
  journal   = {CoRR},
  volume    = {abs/1609.07127},
  eprint    = {1609.07127},
  archivePrefix = {arXiv},
  year      = {2016},
  SKIPurl       = {http://arxiv.org/abs/1609.07127},
  keywords = {proof-development},
}

@Inproceedings{CruzFilipe2003,
author="Cruz-Filipe, Lu{\'i}s
and Spitters, Bas",
SKIPeditor="Basin, David
and Wolff, Burkhart",
title="Program Extraction from Large Proof Developments",
bookTitle="Theorem Proving in Higher Order Logics: 16th International Conference, TPHOLs 2003, Rome, Italy, September 8-12, 2003. Proceedings",
year="2003",
publisher="Springer",
address="Berlin, Heidelberg",
pages="205--220",
isbn="978-3-540-45130-3",
doi="10.1007/10930755_14",
SKIPurl="http://dx.doi.org/10.1007/10930755_14",
keywords = {proof-organization},  
}

@inproceedings{Woos2016,
 author = {Woos, Doug and Wilcox, James R. and Anton, Steve and Tatlock, Zachary and Ernst, Michael D. and Anderson, Thomas},
 title = {Planning for Change in a Formal Verification of the {Raft} Consensus Protocol},
 booktitle = {Proceedings of the 5th ACM SIGPLAN Conference on Certified Programs and Proofs},
 series = {CPP 2016},
 year = {2016},
 isbn = {978-1-4503-4127-1},
 location = {St. Petersburg, FL, USA},
 pages = {154--165},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2854065.2854081},
 doi = {10.1145/2854065.2854081},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {case-study, proof-organization, proof-development},
}

@article{GEUVERS2002271,
title = "A Constructive Algebraic Hierarchy in {Coq}",
journal = "Journal of Symbolic Computation",
volume = "34",
number = "4",
pages = "271--286",
year = "2002",
note = "",
issn = "0747-7171",
doi = "10.1006/jsco.2002.0552",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0747717102905523",
author = "Herman Geuvers and Randy Pollack and Freek Wiedijk and Jan Zwanenburg",
keywords = {case-study, proof-organization},
}

@Inproceedings{Roe2016,
author="Roe, Kenneth
and Smith, Scott",
SKIPeditor="Blanchette, Jasmin Christian
and Merz, Stephan",
title="{CoqPIE}: An {IDE} Aimed at Improving Proof Development Productivity",
bookTitle="Interactive Theorem Proving: 7th International Conference, ITP 2016, Nancy, France, August 22-25, 2016, Proceedings",
year="2016",
publisher="Springer International Publishing",
address="Cham",
pages="491--499",
isbn="978-3-319-43144-4",
doi="10.1007/978-3-319-43144-4_32",
SKIPurl="http://dx.doi.org/10.1007/978-3-319-43144-4_32",
keywords = {proof-development},
}

@inproceedings{Mulligan2014,
 author = {Mulligan, Dominic P. and Owens, Scott and Gray, Kathryn E. and Ridge, Tom and Sewell, Peter},
 title = {Lem: Reusable Engineering of Real-world Semantics},
 booktitle = {Proceedings of the 19th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '14},
 year = {2014},
 isbn = {978-1-4503-2873-9},
 location = {Gothenburg, Sweden},
 pages = {175--188},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/2628136.2628143},
 doi = {10.1145/2628136.2628143},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-development},
}

@article{Voevodsky2015,
  title={An experimental library of formalized Mathematics based on the univalent foundations},
  volume={25},
  DOI={10.1017/S0960129514000577},
  number={5},
  journal={Mathematical Structures in Computer Science},
  publisher={Cambridge University Press},
  author={Voevodsky, Vladimir},
  year={2015},
  pages={1278--1294},
  keywords = {foundations, proof-organization, case-study},
}

@misc{nlab:foundation_of_mathematics,
  author = {{nLab authors}},
  title = {foundation of mathematics},
  url = {http://ncatlab.org/nlab/show/foundation%20of%20mathematics},
  month = jun,
  year = 2019
}

@article{Sewell2010,
  title={Ott: Effective tool support for the working semanticist},
  volume={20},
  DOI={10.1017/S0956796809990293},
  number={1},
  journal={Journal of Functional Programming},
  publisher={Cambridge University Press},
  author={Sewell, Peter and Zappa Nardelli, Francesco and Owens, Scott and Peskine, Gilles and Ridge, Thomas and Sarkar, Susmit and Strni\v{S}a, Rok},
  year={2010},
  pages={71--122},
  keywords = {proof-development},
}

@inproceedings{Pollack1998,
  title = {How to Believe a Machine-Checked Proof},
  author = {Robert Pollack},
  editor = {G. Sambin and J. Smith},
  booktitle = {Twenty Five Years of Constructive Type Theory},
  publisher = {Oxford University Press},
  year = {1998},
  keywords = {foundations, trusted-bases},
}

@techreport{Pollack1997,
  title = {How to Believe a Machine-Checked Proof},
  author = {Robert Pollack},
  year = {1997},
  month = {July},
  number = {BRICS RS-97-18},
  institution = {Department of Computer Science, University of Aarhus},
  address = {Aarhus, Denmark},
  url = {http://www.brics.dk/RS/97/18/BRICS-RS-97-18.pdf},
  keywords = {foundations, trusted-bases},
}

@article{Wiedijk2012,
title = "Pollack-inconsistency",
journal = "Electronic Notes in Theoretical Computer Science",
volume = "285",
pages = "85--100",
year = "2012",
note = "",
issn = "1571-0661",
doi = "10.1016/j.entcs.2012.06.008",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S157106611200028X",
author = "Freek Wiedijk",
keywords = {foundations, trusted-bases},
}

@article{JFR1411,
	author = {Cezary Kaliszyk and Russell O'Connor},
	title = {Computing with Classical Real Numbers},
	journal = {Journal of Formalized Reasoning},
	volume = {2},
	number = {1},
	year = {2009},
	issn = {1972-5787},
        pages = {27--39},
        doi = {10.6092/issn.1972-5787/1411},
	SKIPurl = {https://jfr.unibo.it/article/view/1411},
        keywords = {case-study, proof-organization},
}

@article{Barendregt2351,
	author = {Barendregt, Henk and Wiedijk, Freek},
	title = {The challenge of computer mathematics},
	volume = {363},
	number = {1835},
	pages = {2351--2375},
	year = {2005},
	doi = {10.1098/rsta.2005.1650},
	publisher = {The Royal Society},
	issn = {1364-503X},
	SKIPURL = {http://rsta.royalsocietypublishing.org/content/363/1835/2351.full.pdf},
	journal = {Philosophical Transactions of the Royal Society of London A: Mathematical, Physical and Engineering Sciences},
        keywords = {foundations, trusted-bases},
}

@inproceedings{Aydemir2008,
 author = {Aydemir, Brian and Chargu{\'e}raud, Arthur and Pierce, Benjamin C. and Pollack, Randy and Weirich, Stephanie},
 title = {Engineering Formal Metatheory},
 booktitle = {Proceedings of the 35th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '08},
 year = {2008},
 isbn = {978-1-59593-689-9},
 location = {San Francisco, California, USA},
 pages = {3--15},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/1328438.1328443},
 doi = {10.1145/1328438.1328443},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization},
}

@book{Nederpelt94,
    editor = {Nederpelt, Rob and Geuvers, Herman and de Vrijer, Roel},
    keywords = {case-study, proof-organization},
    publisher = {North-Holland},
    series = {Studies in Logic and the Foundations of Mathematics},
    title = {Selected Papers on {Automath}},
    volume = {133},
    year = {1994}
}

@article{Simpson2006,
  title = {Formalized proof, computation, and the construction problem in algebraic geometry},
  author = {Carlos Simpson},
  journal = {S\'{e}minaires et Congr\`{e}s},
  volume = {13},
  pages = {367--387},
  year = {2006},
  url = {http://emis.ams.org/journals/SC/2006/13/pdf/smf_sem-cong_13_367-387.pdf},
  keywords = {case-study, foundations},
}

@inproceedings{DeMillo1977,
 author = {DeMillo, Richard A. and Lipton, Richard J. and Perlis, Alan J.},
 title = {Social Processes and Proofs of Theorems and Programs},
 booktitle = {Proceedings of the 4th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages},
 series = {POPL '77},
 year = {1977},
 location = {Los Angeles, California},
 pages = {206--214},
 numpages = {9},
 SKIPurl = {http://doi.acm.org/10.1145/512950.512970},
 doi = {10.1145/512950.512970},
 acmid = {512970},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {foundations, trusted-bases},
} 

@article{Barras2010,
	author = {Bruno Barras},
	title = {Sets in {Coq}, {Coq} in Sets},
	journal = {Journal of Formalized Reasoning},
	volume = {3},
	number = {1},
	year = {2010},
	issn = {1972-5787},
        pages = {29--48},
        doi = {10.6092/issn.1972-5787/1695},
	SKIPurl = {https://jfr.unibo.it/article/view/1695},
        keywords = {foundations, trusted-bases},
}

@Inproceedings{Hales2011,
author="Hales, Thomas C.
and Harrison, John
and McLaughlin, Sean
and Nipkow, Tobias
and Obua, Steven
and Zumkeller, Roland",
SKIPeditor="Lagarias, Jeffrey C.",
title="A Revision of the Proof of the {Kepler} Conjecture",
bookTitle="The Kepler Conjecture: The Hales-Ferguson Proof",
year="2011",
publisher="Springer New York",
address="New York, NY",
pages="341--376",
isbn="978-1-4614-1129-1",
doi="10.1007/978-1-4614-1129-1_9",
SKIPurl="http://dx.doi.org/10.1007/978-1-4614-1129-1_9",
keywords = {case-study, proof-organization},
}

@article{harrison2008formal,
  title={Formal proof---theory and practice},
  author={Harrison, John},
  journal={Notices of the AMS},
  volume={55},
  number={11},
  pages={1395--1406},
  year={2008},
  keywords = {foundations, proof-organization, proof-development},
}

@Article{Kaivola2003,
author="Kaivola, Roope
and Kohatsu, Katherine",
title="Proof engineering in the large: formal verification of {Pentium 4} floating-point divider",
journal="International Journal on Software Tools for Technology Transfer",
year="2003",
volume="4",
number="3",
pages="323--334",
issn="1433-2779",
doi="10.1007/s10009-002-0081-6",
SKIPurl="http://dx.doi.org/10.1007/s10009-002-0081-6",
keywords = {case-study, proof-organization},
}

@inproceedings{Kaestner2017,
  TITLE = {Closing the Gap -- The Formally Verified Optimizing Compiler {CompCert}},
  AUTHOR = {K{\"a}stner, Daniel and Leroy, Xavier and Blazy, Sandrine and Schommer, Bernhard and Schmidt, Michael and Ferdinand, Christian},
  URL = {https://hal.inria.fr/hal-01399482},
  BOOKTITLE = {{SSS'17: Safety-critical Systems Symposium 2017}},
  ADDRESS = {Bristol, United Kingdom},
  PUBLISHER = {{CreateSpace}},
  SERIES = {Developments in System Safety Engineering: Proceedings of the Twenty-fifth Safety-critical Systems Symposium},
  PAGES = {163--180},
  YEAR = {2017},
  MONTH = Feb,
  keywords = {case-study, proof-organization, trusted-bases},
}

@Inproceedings{Malecha2016,
author="Malecha, Gregory
and Bengtson, Jesper",
SKIPeditor="Thiemann, Peter",
title="Extensible and Efficient Automation Through Reflective Tactics",
bookTitle="Programming Languages and Systems: 25th European Symposium on Programming, ESOP 2016, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2016, Eindhoven, The Netherlands, April 2--8, 2016, Proceedings",
year="2016",
publisher="Springer",
address="Berlin, Heidelberg",
pages="532--559",
isbn="978-3-662-49498-1",
doi="10.1007/978-3-662-49498-1_21",
SKIPurl="http://dx.doi.org/10.1007/978-3-662-49498-1_21",
keywords = {proof-organization},
}

@Inproceedings{OConnor2005,
author="O'Connor, Russell",
SKIPeditor="Hurd, Joe
and Melham, Tom",
title="Essential Incompleteness of Arithmetic Verified by {Coq}",
bookTitle="Theorem Proving in Higher Order Logics: 18th International Conference, TPHOLs 2005, Oxford, UK, August 22-25, 2005. Proceedings",
year="2005",
publisher="Springer",
address="Berlin, Heidelberg",
pages="245--260",
isbn="978-3-540-31820-0",
doi="10.1007/11541868_16",
SKIPurl="http://dx.doi.org/10.1007/11541868_16",
keywords = {case-study, proof-organization},
}

@article{Wiedijk2008,
  title={Formal proof---getting started},
  author={Wiedijk, Freek},
  journal={Notices of the AMS},
  volume={55},
  number={11},
  pages={1408--1414},
  year={2008},
  url={http://www.ams.org/notices/200811/tx081101408p.pdf},
  keywords = {proof-development},
}

@article{Hales2007,
  title={The {Jordan} curve theorem, formally and informally},
  author={Hales, Thomas C.},
  journal={American Mathematical Monthly},
  volume={114},
  number={10},
  pages={882--894},
  year={2007},
  publisher={Mathematical Association of America},
  keywords = {case-study, proof-organization},
}

@article{Hales2014,
  author    = {Thomas C. Hales},
  title     = {Developments in Formal Proofs},
  journal   = {CoRR},
  volume    = {abs/1408.6474},
  year      = {2014},
  eprint    = {1408.6474},
  archivePrefix = {arXiv},  
  SKIPurl       = {http://arxiv.org/abs/1408.6474},
  keywords = {proof-organization},
}

@Article{Davis2015,
author="Davis, Jared
and Myreen, Magnus O.",
title="The Reflective {Milawa} Theorem Prover is Sound (Down to the Machine Code that Runs it)",
journal="Journal of Automated Reasoning",
year="2015",
volume="55",
number="2",
pages="117--183",
issn="1573-0670",
doi="10.1007/s10817-015-9324-6",
SKIPurl="http://dx.doi.org/10.1007/s10817-015-9324-6",
keywords = {trusted-bases, foundations, case-study},
}

@inproceedings{Kumar2014,
 author = {Kumar, Ramana and Myreen, Magnus O. and Norrish, Michael and Owens, Scott},
 title = {{CakeML}: A Verified Implementation of {ML}},
 booktitle = {Proceedings of the 41st ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '14},
 year = {2014},
 isbn = {978-1-4503-2544-8},
 location = {San Diego, California, USA},
 pages = {179--191},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/2535838.2535841},
 doi = {10.1145/2535838.2535841},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {case-study, proof-organization},
}

@Inproceedings{Delahaye2000,
author="Delahaye, David",
SKIPeditor="Parigot, Michel
and Voronkov, Andrei",
title="A Tactic Language for the System {Coq}",
bookTitle="Logic for Programming and Automated Reasoning: 7th International Conference, LPAR 2000 Reunion Island, France, November 6--10, 2000 Proceedings",
year="2000",
publisher="Springer",
address="Berlin, Heidelberg",
pages="85--95",
isbn="978-3-540-44404-6",
doi="10.1007/3-540-44404-1_7",
SKIPurl="http://dx.doi.org/10.1007/3-540-44404-1_7",
keywords = {proof-organization},
}

@article{Ziliani2015,
  title={Mtac: A monad for typed tactic programming in {Coq}},
  volume={25},
  doi={10.1017/S0956796815000118},
  journal={Journal of Functional Programming},
  publisher={Cambridge University Press},
  author={Ziliani, Beta and Dreyer, Derek and Krishnaswami, Neelakantan R. and Nanevski, Aleksandar and Vafeiadis, Viktor},
  year={2015},
  keywords = {proof-organization},
}

@inproceedings{Bobot2013,
  TITLE = {Preserving User Proofs Across Specification Changes},
  AUTHOR = {Bobot, Fran{\c c}ois and Filli{\^a}tre, Jean-Christophe and March{\'e}, Claude and Melquiond, Guillaume and Paskevich, Andrei},
  URL = {https://hal.inria.fr/hal-00875395},
  BOOKTITLE = {{Fifth Working Conference on Verified Software: Theories, Tools and Experiments}},
  ADDRESS = {Atherton, United States},
  SKIPEDITOR = {Ernie Cohen and Andrey Rybalchenko},
  PUBLISHER = {{Springer}},
  VOLUME = {8164},
  PAGES = {191--201},
  YEAR = {2013},
  MONTH = May,
  PDF = {https://hal.inria.fr/hal-00875395/file/main.pdf},
  keywords = {proof-development},
}

@Inproceedings{Paraskevopoulou2015,
author="Paraskevopoulou, Zoe
and Hrit{\c{c}}u, C{\u{a}}t{\u{a}}lin
and D{\'e}n{\`e}s, Maxime
and Lampropoulos, Leonidas
and Pierce, Benjamin C.",
SKIPeditor="Urban, Christian
and Zhang, Xingyuan",
title="Foundational Property-Based Testing",
bookTitle="Interactive Theorem Proving: 6th International Conference, ITP 2015, Nanjing, China, August 24-27, 2015, Proceedings",
year="2015",
publisher="Springer International Publishing",
address="Cham",
pages="325--343",
isbn="978-3-319-22102-1",
doi="10.1007/978-3-319-22102-1_22",
SKIPurl="http://dx.doi.org/10.1007/978-3-319-22102-1_22",
keywords = {proof-development, proof-organization},
}

@inproceedings{Komendantskaya2012,
  author    = {Ekaterina Komendantskaya and
               J{\'{o}}nathan Heras and
               Gudmund Grov},
  title     = {Machine Learning in {Proof General}: Interfacing Interfaces},
  booktitle = {Proceedings 10th International Workshop On User Interfaces for Theorem
               Provers, {UITP} 2012, Bremen, Germany, July 11th, 2012.},
  pages     = {15--41},
  year      = {2012},
  SKIPurl       = {https://dx.doi.org/10.4204/EPTCS.118.2},
  doi       = {10.4204/EPTCS.118.2},
  keywords = {proof-development},
}

@inproceedings{Delaware2011,
 author = {Delaware, Benjamin and Cook, William and Batory, Don},
 title = {Product Lines of Theorems},
 booktitle = {Proceedings of the 2011 ACM International Conference on Object Oriented Programming Systems Languages and Applications},
 series = {OOPSLA '11},
 year = {2011},
 isbn = {978-1-4503-0940-0},
 location = {Portland, Oregon, USA},
 pages = {595--608},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/2048066.2048113},
 doi = {10.1145/2048066.2048113},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization},
}

@inproceedings{Delaware2013POPL,
 author = {Delaware, Benjamin and d. S. Oliveira, Bruno C. and Schrijvers, Tom},
 title = {Meta-theory \`{a} La Carte},
 booktitle = {Proceedings of the 40th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '13},
 year = {2013},
 isbn = {978-1-4503-1832-7},
 location = {Rome, Italy},
 pages = {207--218},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2429069.2429094},
 doi = {10.1145/2429069.2429094},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization},
}

@inproceedings{Delaware2013ICFP,
 author = {Delaware, Benjamin and Keuchel, Steven and Schrijvers, Tom and Oliveira, Bruno C.d.S.},
 title = {Modular Monadic Meta-theory},
 booktitle = {Proceedings of the 18th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '13},
 year = {2013},
 isbn = {978-1-4503-2326-0},
 location = {Boston, Massachusetts, USA},
 pages = {319--330},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2500365.2500587},
 doi = {10.1145/2500365.2500587},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization},
}

@Inproceedings{Heras2013,
author="Heras, J{\'o}nathan
and Komendantskaya, Ekaterina
and Johansson, Moa
and Maclean, Ewen",
SKIPeditor="McMillan, Ken
and Middeldorp, Aart
and Voronkov, Andrei",
title="Proof-Pattern Recognition and Lemma Discovery in {ACL2}",
bookTitle="Logic for Programming, Artificial Intelligence, and Reasoning: 19th International Conference, LPAR-19, Stellenbosch, South Africa, December 14-19, 2013. Proceedings",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="389--406",
isbn="978-3-642-45221-5",
doi="10.1007/978-3-642-45221-5_27",
SKIPurl="http://dx.doi.org/10.1007/978-3-642-45221-5_27",
keywords = {proof-development},
}

@Article{Heras2014,
author="Heras, J{\'o}nathan
and Komendantskaya, Ekaterina",
title="Recycling Proof Patterns in {Coq}: Case Studies",
journal="Mathematics in Computer Science",
year="2014",
volume="8",
number="1",
pages="99--116",
issn="1661-8289",
doi="10.1007/s11786-014-0173-1",
SKIPurl="http://dx.doi.org/10.1007/s11786-014-0173-1",
keywords = {proof-development, proof-organization},
}

@inproceedings{Nanevski2008,
 author = {Nanevski, Aleksandar and Morrisett, Greg and Shinnar, Avraham and Govereau, Paul and Birkedal, Lars},
 title = {{Ynot}: Dependent Types for Imperative Programs},
 booktitle = {Proceedings of the 13th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '08},
 year = {2008},
 isbn = {978-1-59593-919-7},
 location = {Victoria, BC, Canada},
 pages = {229--240},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/1411204.1411237},
 doi = {10.1145/1411204.1411237},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization},
}

@inproceedings{Chlipala2013,
 author = {Chlipala, Adam},
 title = {The {Bedrock} Structured Programming System: Combining Generative Metaprogramming and {Hoare} Logic in an Extensible Program Verifier},
 booktitle = {Proceedings of the 18th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '13},
 year = {2013},
 isbn = {978-1-4503-2326-0},
 location = {Boston, Massachusetts, USA},
 pages = {391--402},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2500365.2500592},
 doi = {10.1145/2500365.2500592},
 acmid = {2500592},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization},
}

@inproceedings{Bishop2005,
 author = {Bishop, Steve and Fairbairn, Matthew and Norrish, Michael and Sewell, Peter and Smith, Michael and Wansbrough, Keith},
 title = {Rigorous Specification and Conformance Testing Techniques for Network Protocols, As Applied to {TCP}, {UDP}, and Sockets},
 booktitle = {Proceedings of the 2005 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications},
 series = {SIGCOMM '05},
 year = {2005},
 isbn = {1-59593-009-4},
 location = {Philadelphia, Pennsylvania, USA},
 pages = {265--276},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/1080091.1080123},
 doi = {10.1145/1080091.1080123},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {trusted-bases},
}

@inproceedings{Bishop2006,
 author = {Bishop, Steve and Fairbairn, Matthew and Norrish, Michael and Sewell, Peter and Smith, Michael and Wansbrough, Keith},
 title = {Engineering with Logic: {HOL} Specification and Symbolic-evaluation Testing for {TCP} Implementations},
 booktitle = {Conference Record of the 33rd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '06},
 year = {2006},
 isbn = {1-59593-027-2},
 location = {Charleston, South Carolina, USA},
 pages = {55--66},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/1111037.1111043},
 doi = {10.1145/1111037.1111043},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization, trusted-bases},
}

@incollection{Barendregt2001,
 author = {Barendregt, Henk and Geuvers, Herman},
 chapter = {Proof-assistants Using Dependent Type Systems},
 title = {Handbook of Automated Reasoning},
 editor = {Robinson, Alan and Voronkov, Andrei},
 year = {2001},
 isbn = {0-444-50812-0},
 pages = {1149--1238},
 numpages = {90},
 publisher = {Elsevier Science Publishers B. V.},
 address = {Amsterdam, The Netherlands},
 keywords = {foundations},
}

@article{Bringsjord2015,
author = {Selmer Bringsjord},
title = {A Vindication of Program Verification},
journal = {History and Philosophy of Logic},
volume = {36},
number = {3},
pages = {262--277},
year = {2015},
doi = {10.1080/01445340.2015.1065461},
SKIPURL = {http://dx.doi.org/10.1080/01445340.2015.1065461},
keywords = {foundations, trusted-bases},
}

@article{Asperti2009,
  title={Social processes, program verification and all that},
  volume={19},
  DOI={10.1017/S0960129509990041},
  number={5},
  journal={Mathematical Structures in Computer Science},
  publisher={Cambridge University Press},
  author={Asperti, Andrea and Geuvers, Herman and Natarajan, Raja},
  year={2009},
  pages={877--896},
  keywords = {foundations, trusted-bases},
}

@Inproceedings{Blanchette2015,
 author="Blanchette, Jasmin Christian
 and Haslbeck, Maximilian
 and Matichuk, Daniel
 and Nipkow, Tobias",
 SKIPeditor="Kerber, Manfred
 and Carette, Jacques
 and Kaliszyk, Cezary
 and Rabe, Florian
 and Sorge, Volker",
 title="Mining the Archive of Formal Proofs",
 bookTitle="Intelligent Computer Mathematics: International Conference, CICM 2015, Washington, DC, USA, July 13-17, 2015, Proceedings.",
 year="2015",
 publisher="Springer International Publishing",
 address="Cham",
 pages="3--17",
 isbn="978-3-319-20615-8",
 doi="10.1007/978-3-319-20615-8_1",
 SKIPurl="http://dx.doi.org/10.1007/978-3-319-20615-8_1",
 keywords = {proof-development},
}

@article{Wiedijk2009,
	author = {Wiedijk, Freek},
	journal = {Studies in Logic, Grammar and Rhetoric},
	language = {English},
	number = {18(31)},
	pages = {137--151},
	title = {Statistics on digital libraries of mathematics},
	year = {2009},
        keywords = {proof-development},
}

@inproceedings{Swamy2016,
 author = {Swamy, Nikhil and Hri\c{t}cu, C\u{a}t\u{a}lin and Keller, Chantal and Rastogi, Aseem and Delignat-Lavaud, Antoine and Forest, Simon and Bhargavan, Karthikeyan and Fournet, C{\'e}dric and Strub, Pierre-Yves and Kohlweiss, Markulf and Zinzindohoue, Jean-Karim and Zanella-B{\'e}guelin, Santiago},
 title = {Dependent Types and Multi-monadic Effects in F*},
 booktitle = {Proceedings of the 43rd Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '16},
 year = {2016},
 isbn = {978-1-4503-3549-2},
 location = {St. Petersburg, FL, USA},
 pages = {256--270},
 numpages = {15},
 SKIPurl = {http://doi.acm.org/10.1145/2837614.2837655},
 doi = {10.1145/2837614.2837655},
 acmid = {2837655},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {automation},
}

@article{Blanchette2016,
	author = {Blanchette, Jasmin Christian and Kaliszyk, Cezary and Paulson, Lawrence C. and Urban, Josef},
	title = {Hammering towards {QED}},
	journal = {Journal of Formalized Reasoning},
	volume = {9},
	number = {1},
	year = {2016},
	issn = {1972-5787},
        pages = {101--148},
        doi = {10.6092/issn.1972-5787/4593},
	SKIPurl = {https://jfr.unibo.it/article/view/4593},
        keywords = {proof-organization},
}

@Inproceedings{Blanchette2013,
 author = {Paulson, Lawrence C. and Blanchette, Jasmin Christian},
 title = {Three years of experience with {Sledgehammer}, a practical link between automatic and interactive theorem provers},
 SKIPeditor = {Sutcliffe, G. and Schulz, S. and Ternovska, E.},
 booktitle = {International Workshop on the Implementation of Logics (IWIL 2010)},
 series = {EPiC Series},
 volume = {2},
 pages = {1--11},
 year = {2012},
 publisher = {EasyChair},
 keywords = {proof-organization, proof-development},
}

@Inproceedings{Bjoerner2014,
author="Bj{\o}rner, Dines
and Havelund, Klaus",
SKIPeditor="Jones, Cliff
and Pihlajasaari, Pekka
and Sun, Jun",
title="40 Years of Formal Methods",
bookTitle="FM 2014: Formal Methods: 19th International Symposium, Singapore, May 12-16, 2014. Proceedings",
year="2014",
publisher="Springer International Publishing",
address="Cham",
pages="42--61",
isbn="978-3-319-06410-9",
doi="10.1007/978-3-319-06410-9_4",
SKIPurl="http://dx.doi.org/10.1007/978-3-319-06410-9_4",
keywords = {foundations, proof-development, impact},
}

@inproceedings{Yang2011,
 author = {Yang, Xuejun and Chen, Yang and Eide, Eric and Regehr, John},
 title = {Finding and Understanding Bugs in {C} Compilers},
 booktitle = {Proceedings of the 32nd ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI '11},
 year = {2011},
 isbn = {978-1-4503-0663-8},
 location = {San Jose, California, USA},
 pages = {283--294},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/1993498.1993532},
 doi = {10.1145/1993498.1993532},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {trusted-bases},
}

@article{Klein2014micro,
 author = {Klein, Gerwin and Andronick, June and Elphinstone, Kevin and Murray, Toby and Sewell, Thomas and Kolanski, Rafal and Heiser, Gernot},
 title = {Comprehensive Formal Verification of an {OS} Microkernel},
 journal = {ACM Trans. Comput. Syst.},
 issue_date = {February 2014},
 volume = {32},
 number = {1},
 month = feb,
 year = {2014},
 issn = {0734-2071},
 pages = {2:1--2:70},
 articleno = {2},
 numpages = {70},
 SKIPurl = {http://doi.acm.org/10.1145/2560537},
 doi = {10.1145/2560537},
 acmid = {2560537},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {case-study, proof-organization, proof-development},
}

@Inproceedings{Corbineau2008,
author="Corbineau, Pierre",
SKIPeditor="Miculan, Marino
and Scagnetto, Ivan
and Honsell, Furio",
title="A Declarative Language for the {Coq} Proof Assistant",
bookTitle="Types for Proofs and Programs: International Conference, TYPES 2007, Cividale des Friuli, Italy, May 2-5, 2007 Revised Selected Papers",
year="2008",
publisher="Springer",
address="Berlin, Heidelberg",
pages="69--84",
isbn="978-3-540-68103-8",
doi="10.1007/978-3-540-68103-8_5",
SKIPurl="http://dx.doi.org/10.1007/978-3-540-68103-8_5",
keywords = {proof-organization},
}

@Inproceedings{Whiteside2011,
author="Whiteside, Iain
and Aspinall, David
and Dixon, Lucas
and Grov, Gudmund",
SKIPeditor="Davenport, James H.
and Farmer, William M.
and Urban, Josef
and Rabe, Florian",
title="Towards Formal Proof Script Refactoring",
bookTitle="Intelligent Computer Mathematics: 18th Symposium, Calculemus 2011, and 10th International Conference, MKM 2011, Bertinoro, Italy, July 18-23, 2011. Proceedings",
year="2011",
publisher="Springer",
address="Berlin, Heidelberg",
pages="260--275",
isbn="978-3-642-22673-1",
doi="10.1007/978-3-642-22673-1_18",
SKIPurl="http://dx.doi.org/10.1007/978-3-642-22673-1_18",
keywords = {proof-development},
}

@inproceedings{Gonthier2011,
 author = {Gonthier, Georges and Ziliani, Beta and Nanevski, Aleksandar and Dreyer, Derek},
 title = {How to Make Ad Hoc Proof Automation Less Ad Hoc},
 booktitle = {Proceedings of the 16th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '11},
 year = {2011},
 isbn = {978-1-4503-0865-6},
 location = {Tokyo, Japan},
 pages = {163--175},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/2034773.2034798},
 doi = {10.1145/2034773.2034798},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization},
}

@Inproceedings{Sozeau2008,
author="Sozeau, Matthieu
and Oury, Nicolas",
SKIPeditor="Mohamed, Otmane Ait
and Mu{\~{n}}oz, C{\'e}sar
and Tahar, Sofi{\`e}ne",
title="First-Class Type Classes",
bookTitle="Theorem Proving in Higher Order Logics: 21st International Conference, TPHOLs 2008, Montreal, Canada, August 18-21, 2008. Proceedings",
year="2008",
publisher="Springer",
address="Berlin, Heidelberg",
pages="278--293",
isbn="978-3-540-71067-7",
doi="10.1007/978-3-540-71067-7_23",
SKIPurl="http://dx.doi.org/10.1007/978-3-540-71067-7_23",
keywords = {proof-organization},
}

@inproceedings{Berghofer2004,
 author = {Berghofer, Stefan and Nipkow, Tobias},
 title = {Random Testing in {Isabelle/HOL}},
 booktitle = {Proceedings of the Software Engineering and Formal Methods, Second International Conference},
 series = {SEFM '04},
 year = {2004},
 isbn = {0-7695-2222-X},
 pages = {230--239},
 numpages = {10},
 SKIPurl = {http://dx.doi.org/10.1109/SEFM.2004.36},
 doi = {10.1109/SEFM.2004.36},
 acmid = {1030056},
 publisher = {IEEE Computer Society},
 address = {Washington, DC, USA},
 keywords = {proof-development},
} 

@inproceedings{Bulwahn2012,
 author = {Bulwahn, Lukas},
 title = {Smart Testing of Functional Programs in {Isabelle}},
 booktitle = {Proceedings of the 18th International Conference on Logic for Programming, Artificial Intelligence, and Reasoning},
 series = {LPAR'12},
 year = {2012},
 isbn = {978-3-642-28716-9},
 location = {M\&\#233;rida, Venezuela},
 pages = {153--167},
 numpages = {15},
 SKIPurl = {http://dx.doi.org/10.1007/978-3-642-28717-6_14},
 doi = {10.1007/978-3-642-28717-6_14},
 acmid = {2238610},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
 keywords = {proof-development},
} 

@inproceedings{Blanchette2010,
 author = {Blanchette, Jasmin Christian and Nipkow, Tobias},
 title = {{Nitpick}: A Counterexample Generator for Higher-order Logic Based on a Relational Model Finder},
 booktitle = {Proceedings of the First International Conference on Interactive Theorem Proving},
 series = {ITP'10},
 year = {2010},
 isbn = {3-642-14051-3, 978-3-642-14051-8},
 location = {Edinburgh, UK},
 pages = {131--146},
 numpages = {16},
 SKIPurl = {http://dx.doi.org/10.1007/978-3-642-14052-5_11},
 doi = {10.1007/978-3-642-14052-5_11},
 acmid = {2176742},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
 keywords = {proof-development},
}

@INPROCEEDINGS{dramnesc2015theory,
author={Dramnesc, Isabela and Jebelean, Tudor and Stratulat, Sorin},
booktitle={2015 IEEE 13th International Symposium on Intelligent Systems and Informatics (SISY)},
title={Theory exploration of binary trees},
year={2015},
pages={139-144},
doi={10.1109/SISY.2015.7325367},
ISSN={1949-047X},
month={Sep.},
}

@article{buchberger2006theorema,
title = "Theorema: Towards computer-aided mathematical theory exploration",
journal = "Journal of Applied Logic",
volume = "4",
number = "4",
pages = "470 - 504",
year = "2006",
note = "Towards Computer Aided Mathematics",
issn = "1570-8683",
doi = "10.1016/j.jal.2005.10.006",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S1570868305000716",
author = "Bruno Buchberger and Adrian Crǎciun and Tudor Jebelean and Laura Kovács and Temur Kutsia and Koji Nakagawa and Florina Piroi and Nikolaj Popov and Judit Robu and Markus Rosenkranz and Wolfgang Windsteiger",
}

@article{DBLP:journals/eceasst/ValbuenaJ15,
  author    = {Irene Lobo Valbuena and
               Moa Johansson},
  title     = {Conditional Lemma Discovery and Recursion Induction in Hipster},
  journal   = {{ECEASST}},
  volume    = {72},
  year      = {2015},
  url       = {http://journal.ub.tu-berlin.de/eceasst/article/view/1009},
  timestamp = {Fri, 11 Dec 2015 00:00:00 +0100},
  biburl    = {http://dblp.uni-trier.de/rec/bib/journals/eceasst/ValbuenaJ15},
  bibsource = {dblp computer science bibliography, http://dblp.org},
  keywords = {proof-development},
}

@inproceedings{gransden2015sepia,
  title={SEPIA: search for proofs using inferred automata},
  author={Gransden, Thomas and Walkinshaw, Neil and Raman, Rajeev},
  booktitle={International Conference on Automated Deduction},
  pages={246--255},
  year={2015},
  organization={Springer}
}

@phdthesis{Klebanov2009,
  author      = {Vladimir Klebanov},
  title       = {Extending the reach and power of deductive program verification},
  pages       = {XVIII, 174},
  year        = {2009},
  keywords = {proof-development},
}

@Inproceedings{Braibant2011,
author="Braibant, Thomas
and Pous, Damien",
SKIPeditor="Jouannaud, Jean-Pierre
and Shao, Zhong",
title="Tactics for Reasoning Modulo {AC} in {Coq}",
bookTitle="Certified Programs and Proofs: First International Conference, CPP 2011, Kenting, Taiwan, December 7-9, 2011. Proceedings",
year="2011",
publisher="Springer",
address="Berlin, Heidelberg",
pages="167--182",
isbn="978-3-642-25379-9",
doi="10.1007/978-3-642-25379-9_14",
SKIPurl="http://dx.doi.org/10.1007/978-3-642-25379-9_14",
keywords = {proof-organization},
}

@Inproceedings{Gauthier2015,
author="Gauthier, Thibault
and Kaliszyk, Cezary",
SKIPeditor="Davis, Martin
and Fehnker, Ansgar
and McIver, Annabelle
and Voronkov, Andrei",
title="Sharing {HOL4} and {HOL Light} Proof Knowledge",
bookTitle="Logic for Programming, Artificial Intelligence, and Reasoning: 20th International Conference, LPAR-20 2015, Suva, Fiji, November 24-28, 2015, Proceedings",
year="2015",
publisher="Springer",
address="Berlin, Heidelberg",
pages="372--386",
isbn="978-3-662-48899-7",
doi="10.1007/978-3-662-48899-7_26",
SKIPurl="http://dx.doi.org/10.1007/978-3-662-48899-7_26",
keywords = {proof-development},
}

@Article{Barendregt2002,
author="Barendregt, Henk
and Barendsen, Erik",
title="Autarkic Computations in Formal Proofs",
journal="Journal of Automated Reasoning",
year="2002",
volume="28",
number="3",
pages="321--336",
issn="1573-0670",
doi="10.1023/A:1015761529444",
SKIPurl="http://dx.doi.org/10.1023/A:1015761529444",
keywords = {proof-organization},
}

@article{DBLP:journals/corr/SelsamM17,
  author    = {Daniel Selsam and
               Leonardo de Moura},
  title     = {Congruence Closure in Intensional Type Theory},
  journal   = {CoRR},
  volume    = {abs/1701.04391},
  year      = {2017},
  SKIPurl       = {http://arxiv.org/abs/1701.04391},
  eprint    = {1701.04391},
  archivePrefix = {arXiv},  
  timestamp = {Wed, 01 Feb 2017 17:47:56 +0100},
  biburl    = {http://dblp.uni-trier.de/rec/bib/journals/corr/SelsamM17},
  bibsource = {dblp computer science bibliography, http://dblp.org},
  keywords = {proof-organization, foundations},
}

@inproceedings{DBLP:journals/corr/SelsamLD17,
 author = {Selsam, Daniel and Liang, Percy and Dill, David L.},
 title = {Developing Bug-free Machine Learning Systems with Formal Mathematics},
 booktitle = {Proceedings of the 34th International Conference on Machine Learning - Volume 70},
 series = {ICML'17},
 year = {2017},
 location = {Sydney, NSW, Australia},
 pages = {3047--3056},
 numpages = {10},
 SKIPurl = {http://dl.acm.org/citation.cfm?id=3305890.3305996},
 publisher = {JMLR.org},
 keywords = {applications}
}

@inproceedings{Fonseca2017,
 author = {Fonseca, Pedro and Zhang, Kaiyuan and Wang, Xi and Krishnamurthy, Arvind},
 title = {An Empirical Study on the Correctness of Formally Verified Distributed Systems},
 booktitle = {Proceedings of the Twelfth European Conference on Computer Systems},
 series = {EuroSys '17},
 year = {2017},
 isbn = {978-1-4503-4938-3},
 location = {Belgrade, Serbia},
 pages = {328--343},
 numpages = {16},
 SKIPurl = {http://doi.acm.org/10.1145/3064176.3064183},
 doi = {10.1145/3064176.3064183},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {trusted-bases, impact},
}

@article{Rahli2017,
title = "EventML: Specification, verification, and implementation of crash-tolerant state machine replication systems",
journal = "Science of Computer Programming",
volume = "148",
pages = "26 - 48",
year = "2017",
note = "Special issue on Automated Verification of Critical Systems (AVoCS 2015)",
issn = "0167-6423",
doi = "10.1016/j.scico.2017.05.009",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0167642317301193",
author = "Vincent Rahli and David Guaspari and Mark Bickford and Robert L. Constable",
}

@inproceedings{Ridge2015,
 author = {Ridge, Tom and Sheets, David and Tuerk, Thomas and Giugliano, Andrea and Madhavapeddy, Anil and Sewell, Peter},
 title = {{SibylFS}: Formal Specification and Oracle-based Testing for {POSIX} and Real-world File Systems},
 booktitle = {Proceedings of the 25th Symposium on Operating Systems Principles},
 series = {SOSP '15},
 year = {2015},
 isbn = {978-1-4503-3834-9},
 location = {Monterey, California},
 pages = {38--53},
 numpages = {16},
 SKIPurl = {http://doi.acm.org/10.1145/2815400.2815411},
 doi = {10.1145/2815400.2815411},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {trusted-bases},
}

@Inproceedings{Becker2016,
author="Becker, Hanno
and Crespo, Juan Manuel
and Galowicz, Jacek
and Hensel, Ulrich
and Hirai, Yoichi
and Kunz, C{\'e}sar
and Nakata, Keiko
and Sacchini, Jorge Luis
and Tews, Hendrik
and Tuerk, Thomas",
SKIPeditor="Fitzgerald, John
and Heitmeyer, Constance
and Gnesi, Stefania
and Philippou, Anna",
title="Combining Mechanized Proofs and Model-Based Testing in the Formal Analysis of a Hypervisor",
bookTitle="FM 2016: Formal Methods: 21st International Symposium, Limassol, Cyprus, November 9-11, 2016, Proceedings",
year="2016",
publisher="Springer International Publishing",
address="Cham",
pages="69--84",
isbn="978-3-319-48989-6",
doi="10.1007/978-3-319-48989-6_5",
SKIPurl="http://dx.doi.org/10.1007/978-3-319-48989-6_5",
keywords = {case-study, trusted-bases, proof-organization, proof-development},
}

@InProceedings{Chlipala2017,
  author ={Adam Chlipala and Benjamin Delaware and Samuel Duchovni and Jason Gross and Cl{\'e}ment Pit-Claudel and Sorawit Suriyakarn and Peng Wang and Katherine Ye},
  title ={The End of History: Using a Proof Assistant to Replace Language Design with Library Design},
  booktitle ={2nd Summit on Advances in Programming Languages (SNAPL 2017)},
  pages ={3:1--3:15},
  series ={Leibniz International Proceedings in Informatics (LIPIcs)},
  ISBN ={978-3-95977-032-3},
  ISSN ={1868-8969},
  year ={2017},
  volume ={71},
  SKIPeditor ={Benjamin S. Lerner and Rastislav Bod{\'i}k and Shriram Krishnamurthi},
  publisher ={Schloss Dagstuhl--Leibniz-Zentrum fuer Informatik},
  address ={Dagstuhl, Germany},
  SKIPURL ={http://drops.dagstuhl.de/opus/volltexte/2017/7123},
  URN ={urn:nbn:de:0030-drops-71233},
  doi ={10.4230/LIPIcs.SNAPL.2017.3},
  keywords ={proof-development, proof-organization},
}

@inproceedings{Tanter2015,
 author = {Tanter, \'{E}ric and Tabareau, Nicolas},
 title = {Gradual Certified Programming in {Coq}},
 booktitle = {Proceedings of the 11th Symposium on Dynamic Languages},
 series = {DLS 2015},
 year = {2015},
 isbn = {978-1-4503-3690-1},
 location = {Pittsburgh, PA, USA},
 pages = {26--40},
 numpages = {15},
 SKIPurl = {http://doi.acm.org/10.1145/2816707.2816710},
 doi = {10.1145/2816707.2816710},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization},
}

@article{felty2015benchmarks,
  author    = {Amy P. Felty and
               Alberto Momigliano and
               Brigitte Pientka},
  title     = {The Next 700 Challenge Problems for Reasoning with Higher-Order Abstract
               Syntax Representations: Part 1-A Common Infrastructure for Benchmarks},
  journal   = {CoRR},
  volume    = {abs/1503.06095},
  year      = {2015},
  SKIPurl       = {http://arxiv.org/abs/1503.06095},
  archivePrefix = {arXiv},
  eprint    = {1503.06095},
  timestamp = {Mon, 13 Aug 2018 16:46:32 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/corr/FeltyMP15},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@article{felty2018benchmarks, 
title={Benchmarks for reasoning with syntax trees containing binders and contexts of assumptions}, 
volume={28}, 
DOI={10.1017/S0960129517000093}, 
number={9}, 
journal={Mathematical Structures in Computer Science}, 
publisher={Cambridge University Press}, 
author={Felty, Amy and Momigliano, Alberto and Pientka, Brigitte}, 
year={2018}, 
pages={1507--1540}}

@misc{poplmark-website,
  author={Aydemir, Brian E. and Bohannon, Aaron and Fairbairn, Matthew and Foster, J. Nathan and Pierce, Benjamin C. and Sewell, Peter and Vytiniotis, Dimitrios and Washburn, Geoffrey and Weirich, Stephanie and Zdancewic, Steve},
  title = {The {POPLMark} Challenge},
  url = {http://www.seas.upenn.edu/~plclub/poplmark/},
  year = {2005-2019},
  accessed = {June 24th, 2019}
}

@inproceedings{Aydemir2005,
 author = {Aydemir, Brian E. and Bohannon, Aaron and Fairbairn, Matthew and Foster, J. Nathan and Pierce, Benjamin C. and Sewell, Peter and Vytiniotis, Dimitrios and Washburn, Geoffrey and Weirich, Stephanie and Zdancewic, Steve},
 title = {Mechanized Metatheory for the Masses: The {POPLMark} Challenge},
 booktitle = {Proceedings of the 18th International Conference on Theorem Proving in Higher Order Logics},
 series = {TPHOLs'05},
 year = {2005},
 isbn = {3-540-28372-2, 978-3-540-28372-0},
 location = {Oxford, UK},
 pages = {50--65},
 numpages = {16},
 SKIPurl = {http://dx.doi.org/10.1007/11541868_4},
 doi = {10.1007/11541868_4},
 acmid = {2145062},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
 keywords = {proof-development, proof-organization}
} 

@article{Cardelli1994,
 author = {Cardelli, Luca and Martini, Simone and Mitchell, John C. and Scedrov, Andre},
 title = {An Extension of System F with Subtyping},
 journal = {Inf. Comput.},
 issue_date = {Feb. 15/March 1994},
 volume = {109},
 number = {1-2},
 month = feb,
 year = {1994},
 issn = {0890-5401},
 pages = {4--56},
 numpages = {53},
 SKIPurl = {http://dx.doi.org/10.1006/inco.1994.1013},
 doi = {10.1006/inco.1994.1013},
 acmid = {184043},
 publisher = {Academic Press, Inc.},
 address = {Duluth, MN, USA},
} 

@article{Audebaud2009,
 author = {Audebaud, Philippe and Paulin-Mohring, Christine},
 title = {Proofs of Randomized Algorithms in {Coq}},
 journal = {Sci. Comput. Program.},
 issue_date = {June, 2009},
 volume = {74},
 number = {8},
 month = jun,
 year = {2009},
 issn = {0167-6423},
 pages = {568--589},
 numpages = {22},
 SKIPurl = {http://dx.doi.org/10.1016/j.scico.2007.09.002},
 doi = {10.1016/j.scico.2007.09.002},
 acmid = {1537538},
 publisher = {Elsevier North-Holland, Inc.},
 address = {Amsterdam, The Netherlands, The Netherlands},
 keywords = {proof-organization},
}

@INPROCEEDINGS{Dybjer2003,
author={Peter Dybjer and Qiao Haiyan and M. Takeyama},
booktitle={Third International Conference on Quality Software, 2003. Proceedings.},
title={Verifying {Haskell} programs by combining testing and proving},
year={2003},
pages={272--279},
keywords={proof-organization, proof-development},
doi={10.1109/QSIC.2003.1319111},
month={Nov},
}

@inproceedings{Delaware2015,
 author = {Delaware, Benjamin and Pit-Claudel, Cl{\'e}ment and Gross, Jason and Chlipala, Adam},
 title = {{Fiat}: Deductive Synthesis of Abstract Data Types in a Proof Assistant},
 booktitle = {Proceedings of the 42Nd Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '15},
 year = {2015},
 isbn = {978-1-4503-3300-9},
 location = {Mumbai, India},
 pages = {689--700},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2676726.2677006},
 doi = {10.1145/2676726.2677006},
 acmid = {2677006},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization, proof-development},
}

@book{CoqArt,
  title = {Interactive Theorem Proving and Program Development: {Coq'Art}: The Calculus of Inductive Constructions},
  year = {2004},
  doi = {10.1007/978-3-662-07964-5},
  author = {Yves Bertot and Pierre Casteran},
  publisher = {Springer},
  address = {Berlin, Heidelberg},
  series = {Texts in Theoretical Computer Science An EATCS Series},
  isbn = {978-3-662-07964-5},
  keywords = {proof-organization, proof-development, foundations},
}

@book{CPDT,
  title = {Certified Programming with Dependent Types: A Pragmatic Introduction to the {Coq} Proof Assistant},
  author = {Adam Chlipala},
  year = {2013},
  publisher = {MIT Press},
  address = {Cambridge, MA, USA},
  isbn = {978-0-262-31786-3},
  keywords = {proof-organization, proof-development, foundations},
}

@misc{nlab:equality,
  author = {{nLab authors}},
  title = {equality},
  url = {http://ncatlab.org/nlab/show/equality},
  month = jun,
  year = 2019
}

@misc{nlab:intensional_type_theory,
  author = {{nLab authors}},
  title = {intensional type theory},
  url = {http://ncatlab.org/nlab/show/intensional%20type%20theory},
  month = jun,
  year = 2019
}

@inproceedings{Myreen2012,
 author = {Myreen, Magnus O. and Owens, Scott},
 title = {Proof-producing Synthesis of {ML} from Higher-order Logic},
 booktitle = {Proceedings of the 17th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '12},
 year = {2012},
 isbn = {978-1-4503-1054-3},
 location = {Copenhagen, Denmark},
 pages = {115--126},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2364527.2364545},
 doi = {10.1145/2364527.2364545},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {trusted-bases},
}

@misc{DeepSpec,
  title = {{DeepSpec} Project},
  key = {DeepSpec},
  url = {https://deepspec.org},
  year={2013-2019},
  author={{DeepSpec Team}},
  accessed={February 10th, 2019}
}

@misc{agda-elab,
  title={Agda reflection overhaul},
  url={http://lists.chalmers.se/pipermail/agda/2016/008414.html},
  year={2016},
  author={Norell, Ulf}
}

@misc{coqide-commit,
  title={interface GTK2 experimentale},
  url={http://github.com/coq/coq/commit/3fe1d8e4287},
  year={2003},
  author={{Coq Development Team}},
  accessed={February 7th, 2019}
}

@misc{isabelle-jedit,
  title={{Isabelle/jEdit}},
  url={http://isabelle.in.tum.de/dist/doc/jedit.pdf},
  year={2018},
  author={Wenzel, Makarius},
  accessed={February 7th, 2019}
}

@misc{isabelle-pide,
  title={Visual Studio Code as Prover IDE for Isabelle},
  url={http://sketis.net/2017/visual-studio-code-as-prover-ide-for-isabelle},
  year={2017},
  author={Wenzel, Makarius},
  accessed={February 7th, 2019}
}

@misc{agda-editing,
  title={Quick Guide to Editing, Type Checking and Compiling Agda Code -- Agda 2.5.4.2 Documentation},
  url={http://agda.readthedocs.io/en/v2.5.4.2/getting-started/quick-guide.html#quick-guide-introduction},
  year={2005-2017},
  author={{Agda Development Team}},
  accessed={February 6th, 2019}
}

@misc{hol4-interact,
  title={Guide to HOL4 interaction and basic proofs},
  url={http://hol-theorem-prover.org/HOL-interaction.pdf},
  year={2008-2018},
  author={Myreen, Magnus O.},
  accessed={February 6th, 2019}
}

@misc{hol-interact,
  title={Running hol},
  url={https://hol-theorem-prover.org/guidebook/#running-hol},
  year={2016-2018},
  author={{HOL Development Team}},
  accessed={February 7th, 2019}
}

@misc{altenkirch1994user,
  title={A user's guide to ALF},
  author={Altenkirch, Thorsten and Gaspes, Veronica and Nordstr{\"o}m, Bengt and von Sydow, Bj{\"o}rn},
  url={http://www.cse.chalmers.se/~bengt/papers/usersguidetoalf.pdf},
  year={1994},
  accessed={February 6th, 2019}
}

@misc{coq-omega,
  title={Omega: a solver for quantifier-free problems in Presburger Arithmetic},
  url={http://coq.inria.fr/refman/addendum/omega.html},
  year={1999-2018},
  author={Cr{\'{e}}gut, Pierre},
  accessed={January 30th, 2019}
}

@article{luo1999coercive,
    author = {Luo, Z},
    title = {Coercive subtyping},
    journal = {Journal of Logic and Computation},
    volume = {9},
    number = {1},
    pages = {105-130},
    year = {1999},
    month = {02},
    issn = {0955-792X},
    doi = {10.1093/logcom/9.1.105},
    SKIPurl = {https://doi.org/10.1093/logcom/9.1.105},
    publisher={Oxford University Press}    
}

@Article{callaghan2001implementation,
author="Callaghan, Paul
and Luo, Zhaohui",
title="An Implementation of {LF} with Coercive Subtyping {\&} Universes",
journal="Journal of Automated Reasoning",
year="2001",
month="Jul",
day="01",
volume="27",
number="1",
pages="3--27",
issn="1573-0670",
doi="10.1023/A:1010648911114",
SKIPurl="https://doi.org/10.1023/A:1010648911114"
}

@misc{lean-coerce,
  title={Type Classes---Theorem Proving in Lean 3.4.0 Documentation},
  url={http://leanprover.github.io/theorem_proving_in_lean/type_classes.html},
  year={2017},
  author={Avigad, Jeremy and de Moura, Leonardo and Kong, Soonho},
  accessed={July 2nd, 2019}
}

@misc{coq-coerce,
  title={Implicit Coercions},
  url={http://coq.inria.fr/refman/addendum/implicit-coercions.html},
  year={1999-2018},
  author={Saibi, Amokrane},
  accessed={July 2nd, 2019}
}

@misc{coq-tactics,
  title={Tactics},
  url={http://coq.inria.fr/refman/proof-engine/tactics.html},
  year={1999-2018},
  author={{Coq Development Team}},
  accessed={January 30th, 2019}
}

@misc{coq-commands,
  title={The Coq Commands},
  url={http://coq.inria.fr/refman/practical-tools/coq-commands.html},
  year={1999-2018},
  author={{Coq Development Team}},
  accessed={February 6th, 2019}
}

@misc{coqide,
  title={Coq Integrated Development Environment},
  url={http://coq.inria.fr/refman/practical-tools/coqide.html},
  year={1999-2018},
  author={{Coq Development Team}},
  accessed={February 7th, 2019}
}

@misc{hol-tutorial,
  title={The HOL System TUTORIAL},
  url={http://sourceforge.net/projects/hol/files/hol/kananaskis-12/kananaskis-12-tutorial.pdf?download},
  year={2018},
  author={{HOL Development Team}},
  accessed={February 7th, 2019}
}

@misc{cubical-agda,
  title={Cubical Type Theory in Agda -- Agda 2.6.0 Documentation},
  url={http://agda.readthedocs.io/en/latest/language/cubical.html},
  year={2005-2018},
  author={{Agda Development Team}},
  accessed={February 6th, 2019}
}

@misc{redprl,
  title={The RedPRL Proof Assistant},
  url={http://www.redprl.org},
  year={2015-2018},
  author={{RedPRL Development Team}},
  accessed={February 6th, 2019}
}

@inproceedings{angiuli2018,
  author    = {Carlo Angiuli and
               Evan Cavallo and
               Kuen{-}Bang Hou and
               Robert Harper and
               Jonathan Sterling},
  title     = {The RedPRL Proof Assistant (Invited Paper)},
  booktitle = {Proceedings of the 13th International Workshop on Logical Frameworks
               and Meta-Languages: Theory and Practice, LFMTP@FSCD 2018, Oxford,
               UK, 7th July 2018.},
  pages     = {1--10},
  year      = {2018},
  SKIPurl       = {https://doi.org/10.4204/EPTCS.274.1},
  doi       = {10.4204/EPTCS.274.1},
  timestamp = {Mon, 10 Sep 2018 16:20:34 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/corr/abs-1807-01869},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@article{auto2,
  author    = {Bohua Zhan},
  title     = {AUTO2, a saturation-based heuristic prover for higher-order logic},
  journal   = {CoRR},
  volume    = {abs/1605.07577},
  year      = {2016},
  SKIPurl       = {http://arxiv.org/abs/1605.07577},
  archivePrefix = {arXiv},
  eprint    = {1605.07577},
  timestamp = {Mon, 13 Aug 2018 16:48:13 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/corr/Zhan16},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{Lindblad2004,
 author = {Lindblad, Fredrik and Benke, Marcin},
 title = {A Tool for Automated Theorem Proving in Agda},
 booktitle = {Proceedings of the 2004 International Conference on Types for Proofs and Programs},
 series = {TYPES'04},
 year = {2006},
 isbn = {3-540-31428-8, 978-3-540-31428-8},
 location = {Jouy-en-Josas, France},
 pages = {154--169},
 numpages = {16},
 SKIPurl = {http://dx.doi.org/10.1007/11617990_10},
 doi = {10.1007/11617990_10},
 acmid = {2150519},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
} 

@misc{predicavity1,
  title={Why does {Coq} have {Prop}?},
  author={cody},
  url={http://cstheory.stackexchange.com/questions/21836/why-does-coq-have-prop},
  howpublished = {Theoretical Computer Science Stack Exchange},
  year={2015},
  accessed={July 8th, 2019}
}

@misc{predicativity2,
  title={Proof Mining},
  url={http://www.andrew.cmu.edu/user/avigad/Talks/asl04.pdf},
  year={2004},
  author={Avigad, Jeremy}
}

@misc{proofgeneralwebsite,
  title={Proof General 4.4.1~pre Documentation},
  url = {https://proofgeneral.github.io/doc/userman/},
  author={{PG development team}},
  year={2016}
}

@misc{ltac,
  title={The Tactic Language},
  url={https://coq.inria.fr/refman/proof-engine/ltac.html},
  author={Inria},
  year={1999-2018}
}

@Inproceedings{ltac2,
  title={Ltac2: Tactical Warfare},
  author={P{\'e}drot, Pierre-Marie},
  year={2019},
  bookTitle={CoqPL 2019}
}

@article{matichuk2015eisbach,
  title={The Eisbach user manual},
  author={Matichuk, Daniel and Wenzel, Makarius and Murray, Toby},
  journal={Isabelle Community},
  year={2015}
}

@misc{structtact,
  title={StructTact},
  author={{StructTact Development Team}},
  url={http://github.com/uwplse/StructTact},
  accessed={January 14th, 2019},
  year={2016-2019}
}

@misc{agdasemiring,
  title={agda-tactics: Semiring},
  url={http://github.com/xplat/agda-tactics/blob/master/Tactics/Nat/Semiring.agda},
  year={2012},
  author={Pouillard, Nicolas},
  accessed={February 10th, 2019}
}

@misc{isabelleafp,
  title={Archive of Formal Proofs: Submission Guidelines},
  url={https://www.isa-afp.org/submitting.html},
  author={Klein, Gerwin and Nipkow, Tobias and Paulson, Larry and Thiemann, Ren{\'e}},
  year={2004-2019},
  accessed={February 10th, 2019}
}

@misc{isabellestyle,
  title = {Gerwin's Style Guide for {Isabelle/HOL}},
  url = {https://proofcraft.org/blog/isabelle-style.html},
  author = {Klein, Gerwin},
  year={2015},
  accessed={February 10th, 2019}
}

@misc{coq,
  title={The {Coq} Proof Assistant},
  url={http://coq.inria.fr},
  year={1989-2019},
  author={{Coq Development Team}},
  accessed={July 9th, 2019}
}

@misc{isabelle,
  title={Isabelle},
  url={http://isabelle.in.tum.de},
  year={1994-2019},
  author={{Isabelle Development Team}},
  accessed={July 9th, 2019}
}

@misc{agda,
  title={The {Agda} Wiki},
  url={http://wiki.portal.chalmers.se/agda/pmwiki.php},
  year={2007-2019},
  author={{Agda Development Team}},
  accessed={July 9th, 2019}
}

@misc{acl2,
  title={{ACL2}},
  url={http://www.cs.utexas.edu/users/moore/acl2},
  year={1990-2019},
  author={{ACL2 Development Team}},
  accessed={July 9th, 2019}
}

@misc{z3,
  title={{Z3}},
  url={http://github.com/Z3Prover/z3/wiki},
  year={2008-2019},
  author={{Z3 Development Team}},
  accessed={July 9th, 2019}
}

@misc{hollight,
  title={{HOL Light}},
  url={http://www.cl.cam.ac.uk/~jrh13/hol-light},
  year={1996-2019},
  author={{HOL Light Development Team}},
  accessed={July 9th, 2019}
}

@misc{coqstyle,
  title = {CoqStyle},
  url = {https://github.com/coq/coq/wiki/CoqStyle},
  year={2017},
  author={{Coq Development Team}},
  accessed={February 10th, 2019}
}

@InProceedings{CompanyCoq2016,
  Title        = {{Company-Coq}: Taking Proof General one step closer to a real {IDE}},
  Author       = {Pit-Claudel, Cl{\'e}ment and Courtieu, Pierre},
  Booktitle    = {CoqPL'16: The Second International Workshop on Coq for PL},
  Year         = {2016},
  Month        = jan,
  Doi          = {10.5281/zenodo.44331},
  SKIPUrl          = {http://dx.doi.org/10.5281/zenodo.44331},
  keywords     = {proof-development}
}

@article{stump2017calculus,
  title={The calculus of dependent lambda eliminations},
  volume={27},
  doi={10.1017/S0956796817000053},
  journal={Journal of Functional Programming},
  publisher={Cambridge University Press},
  author={Stump, Aaron},
  year={2017},
  pages={e14},
  keywords = {proof-organization, reuse}  
}

@phdthesis{pons1999conception,
  title={Conception et r{\'E}alisation d'outils d'aide au d{\'E}veloppement de grosses th{\'E}ories dans les syst{\`e}mes de preuves interactifs},
  author={Pons, Olivier},
  year={1999}
}

@phdthesis{curien1995,
  TITLE = {{Tools for proof by analogy}},
  AUTHOR = {Curien, R{\'e}gis},
  URL = {https://hal.univ-lorraine.fr/tel-01748604},
  NUMBER = {1995NAN10007},
  SCHOOL = {{Universit{\'e} Henri Poincar{\'e} - Nancy 1}},
  YEAR = {1995},
  MONTH = Jan,
  KEYWORDS = {Th{\'e}or{\`e}mes ; Filtres (informatique) ; Preuve ;  Th{\'e}orie de la ; Analogie (philosophie)},
  TYPE = {Theses},
  PDF = {https://hal.univ-lorraine.fr/tel-01748604/file/SCD_T_1995_0007_CURIEN.pdf},
  HAL_ID = {tel-01748604},
  HAL_VERSION = {v1},
}

@Inbook{kolbe1998proof,
author="Kolbe, Thomas
and Walther, Christoph",
SKIPeditor="Bibel, Wolfgang
and Schmitt, Peter H.",
title="Proof Analysis, Generalization and Reuse",
bookTitle="Automated Deduction --- A Basis for Applications: Volume II: Systems and Implementation Techniques",
year="1998",
publisher="Springer",
address="Dordrecht",
pages="189--219",
isbn="978-94-017-0435-9",
doi="10.1007/978-94-017-0435-9_8",
SKIPurl="https://doi.org/10.1007/978-94-017-0435-9_8"
}

@inproceedings{hasker1992generalization,
  title={Generalization at higher types},
  author={Hasker, Robert W and Reddy, Uday S},
  booktitle={Proceedings of the Workshop on the $\lambda$Prolog Programming Language},
  pages={257--271},
  year={1992}
}

@article{Diehl2018,
 author = {Diehl, Larry and Firsov, Denis and Stump, Aaron},
 title = {Generic Zero-cost Reuse for Dependent Types},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {September 2018},
 volume = {2},
 number = {ICFP},
 month = jul,
 year = {2018},
 issn = {2475-1421},
 pages = {104:1--104:30},
 articleno = {104},
 numpages = {30},
 SKIPurl = {http://doi.acm.org/10.1145/3236799},
 doi = {10.1145/3236799},
 acmid = {3236799},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization, reuse},
}

@Inproceedings{Boite2004,
author="Boite, Olivier",
SKIPeditor="Slind, Konrad
and Bunker, Annette
and Gopalakrishnan, Ganesh",
title="Proof Reuse with Extended Inductive Types",
bookTitle="Theorem Proving in Higher Order Logics: 17th International Conference, TPHOLs 2004, Park City, Utah, USA, September 14-17, 2004. Proceedings",
year="2004",
publisher="Springer",
address="Berlin, Heidelberg",
pages="50--65",
isbn="978-3-540-30142-4",
doi="10.1007/978-3-540-30142-4_4",
SKIPurl="http://dx.doi.org/10.1007/978-3-540-30142-4_4",
keywords = {proof-organization, proof-development}
}

@INPROCEEDINGS{Mulhern06proofweaving,
    author = {Anne Mulhern},
    title = {Proof Weaving},
    booktitle = {In Proceedings of the First Informal ACM SIGPLAN Workshop on Mechanizing Metatheory},
    year = {2006},
    keywords = {proof-organization, proof-development}
}

@Inproceedings{Grov2016,
author="Grov, Gudmund
and Tumas, Vytautas",
SKIPeditor="Chechik, Marsha
and Raskin, Jean-Fran{\c{c}}ois",
title="Tactics for the {Dafny} Program Verifier",
bookTitle="Tools and Algorithms for the Construction and Analysis of Systems: 22nd International Conference, TACAS 2016, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2016, Eindhoven, The Netherlands, April 2-8, 2016, Proceedings",
year="2016",
publisher="Springer",
address="Berlin, Heidelberg",
pages="36--53",
isbn="978-3-662-49674-9",
doi="10.1007/978-3-662-49674-9_3",
SKIPurl="http://dx.doi.org/10.1007/978-3-662-49674-9_3",
keywords = {proof-development},
}

@article{Hales2017,
  title={A Formal Proof of the {Kepler} Conjecture},
  volume={5},
  doi={10.1017/fmp.2017.1},
  journal={Forum of Mathematics, Pi},
  publisher={Cambridge University Press},
  author = {Thomas Hales and
            Mark Adams and
            Gertrud Bauer and
            Tat Dat Dang and
            John Harrison and
            Le Truong Hoang and
            Cezary Kaliszyk and
            Victor Magron and
            Sean McLaughlin and
            Tat Thang Nguyen and
            Quang Truong Nguyen and
            Tobias Nipkow and
            Steven Obua and
            Joseph Pleso and
            Jason Rute and
            Alexey Solovyev and
            Thi Hoai An Ta and
            Nam Trung Tran and
            Thi Diep Trieu and
            Josef Urban and
            Ky Vu and
            Roland Zumkeller},
  year={2017},
  keywords = {proof-organization, proof-development, case-study},
}

@article{Gonthier2010,
author = {Georges Gonthier and Assia Mahboubi},
title = {An introduction to small scale reflection in {Coq}},
journal = {Journal of Formalized Reasoning},
volume = {3},
number = {2},
year = {2010},
issn = {1972-5787},
pages = {95--152},
doi = {10.6092/issn.1972-5787/1979},
SKIPurl = {https://jfr.unibo.it/article/view/1979},
keywords = {proof-organization, proof-development},
}

@inproceedings{Amin2017,
 author = {Amin, Nada and Rompf, Tiark},
 title = {Type Soundness Proofs with Definitional Interpreters},
 booktitle = {Proceedings of the 44th ACM SIGPLAN Symposium on Principles of Programming Languages},
 series = {POPL 2017},
 year = {2017},
 isbn = {978-1-4503-4660-3},
 location = {Paris, France},
 pages = {666--679},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/3009837.3009866},
 doi = {10.1145/3009837.3009866},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization},
} 

@incollection{Milner1979,
  author = {Gordon, Michael J. C. and Milner, Robin and Wadsworth, Christopher P.},
  isbn = {978-3-540-38526-4},
  title = {{Edinburgh LCF}: A Mechanised Logic of Computation},
  booktitle = {Lecture Notes in Computer Science},
  year = {1979},
  volume = {78},
  doi = {10.1007/3-540-09724-4},
  keywords = {proof-organization, trusted-bases},
}

@incollection{Paulson1994,
  author = {Lawrence C. Paulson},
  isbn = {978-3-540-48586-5},
  title = {{Isabelle}: A Generic Theorem Prover},
  booktitle = {Lecture Notes in Computer Science},
  year = {1994},
  volume = {828},
  doi = {10.1007/BFb0030541},
  keywords = {foundations},
}

@InProceedings{Barthe2001,
author="Barthe, Gilles
and Pons, Olivier",
SKIPeditor="Honsell, Furio
and Miculan, Marino",
title="Type Isomorphisms and Proof Reuse in Dependent Type Theory",
booktitle="Foundations of Software Science and Computation Structures",
year="2001",
publisher="Springer",
address="Berlin, Heidelberg",
pages="57--71",
isbn="978-3-540-45315-4",
doi="10.1007/3-540-45315-6_4",
}

@incollection{Johnsen2004,
author="Johnsen, Einar Broch
and L{\"u}th, Christoph",
SKIPeditor="Slind, Konrad
and Bunker, Annette
and Gopalakrishnan, Ganesh",
title="Theorem Reuse by Proof Term Transformation",
bookTitle="Theorem Proving in Higher Order Logics: 17th International Conference, TPHOLs 2004, Park City, Utah, USA, September 14-17, 2004. Proceedings",
year="2004",
publisher="Springer",
address="Berlin, Heidelberg",
pages="152--167",
isbn="978-3-540-30142-4",
doi="10.1007/978-3-540-30142-4_12",
SKIPurl="http://dx.doi.org/10.1007/978-3-540-30142-4_12",
keywords = {proof-organization},
}

@inproceedings{Danielsson2012,
 author = {Danielsson, Nils Anders},
 title = {Operational Semantics Using the Partiality Monad},
 booktitle = {Proceedings of the 17th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '12},
 year = {2012},
 isbn = {978-1-4503-1054-3},
 location = {Copenhagen, Denmark},
 pages = {127--138},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2364527.2364546},
 doi = {10.1145/2364527.2364546},
 acmid = {2364546},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-organization},
} 

@inproceedings{OConnor2016,
 author = {O'Connor, Liam and Chen, Zilin and Rizkallah, Christine and Amani, Sidney and Lim, Japheth and Murray, Toby and Nagashima, Yutaka and Sewell, Thomas and Klein, Gerwin},
 title = {Refinement Through Restraint: Bringing Down the Cost of Verification},
 booktitle = {Proceedings of the 21st ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP 2016},
 year = {2016},
 isbn = {978-1-4503-4219-3},
 location = {Nara, Japan},
 pages = {89--102},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/2951913.2951940},
 doi = {10.1145/2951913.2951940},
 acmid = {2951940},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {proof-development},
}

@InProceedings{Rizkallah16,
author="Rizkallah, Christine
and Lim, Japheth
and Nagashima, Yutaka
and Sewell, Thomas
and Chen, Zilin
and O'Connor, Liam
and Murray, Toby
and Keller, Gabriele
and Klein, Gerwin",
SKIPeditor="Blanchette, Jasmin Christian
and Merz, Stephan",
title="A Framework for the Automatic Formal Verification of Refinement from {Cogent} to {C}",
booktitle="Interactive Theorem Proving",
year="2016",
publisher="Springer",
address="Cham",
pages="323--340",
isbn="978-3-319-43144-4",
doi="10.1007/978-3-319-43144-4_20",
keywords = {proof-development},
}
  
@inproceedings{Amani16,
    doi              = {10.1145/2872362.2872404},
    author           = {Amani, Sidney and Hixon, Alex and Chen, Zilin and Rizkallah, Christine and Chubb, Peter and
                        O'Connor, Liam and Beeren, Joel and Nagashima, Yutaka and Lim, Japheth and Sewell, Thomas and Tuong,
                        Joseph and Keller, Gabriele and Murray, Toby and Klein, Gerwin and Heiser, Gernot},
    month            = apr,
    year             = {2016},
    title            = {{Cogent}: Verifying High-Assurance File System Implementations},
    booktitle        = {International Conference on Architectural Support for Programming Languages and Operating Systems},
    pages            = {175-188},
    address          = {Atlanta, GA, USA},
    keywords = {proof-development},
}

@article{Urban2008,
author={Urban, Christian},
title={Nominal Techniques in {Isabelle/HOL}},
journal={Journal of Automated Reasoning},
year={2008},
month=may,
day={01},
volume={40},
number={4},
pages={327--356},
issn={1573-0670},
doi={10.1007/s10817-008-9097-2},
SKIPurl={http://dx.doi.org/10.1007/s10817-008-9097-2},
keywords={proof-organization},
}

@article{Swierstra2008,
 author = {Swierstra, Wouter},
 title = {Data Types \`{a} La Carte},
 journal = {J. Funct. Program.},
 issue_date = {July 2008},
 volume = {18},
 number = {4},
 month = jul,
 year = {2008},
 issn = {0956-7968},
 pages = {423--436},
 numpages = {14},
 SKIPurl = {http://dx.doi.org/10.1017/S0956796808006758},
 doi = {10.1017/S0956796808006758},
 acmid = {1394795},
 publisher = {Cambridge University Press},
 address = {New York, NY, USA},
} 

@Article{Nipkow1998,
author="Nipkow, Tobias",
title="{Winskel} is (almost) Right: Towards a Mechanized Semantics Textbook",
journal="Formal Aspects of Computing",
year="1998",
month="Nov",
day="01",
volume="10",
number="2",
pages="171--186",
issn="1433-299X",
doi="10.1007/s001650050009",
SKIPurl="http://dx.doi.org/10.1007/s001650050009"
}

@inbook{Bertot2009,
author = {Yves Bertot},
title = {Theorem proving support in programming language semantics},
editor = {Yves Bertot and G{\'e}rard Huet and Jean-Jacques L{\'e}vy and Gordon Plotkin},
booktitle = {From {S}emantics to {C}omputer {S}cience: {E}ssays in {H}onour of {G}illes {K}ahn},
publisher = {Cambridge University Press},
year = {2009},
pages = {337--361},
url = {http://hal.inria.fr/inria-00160309/},
keywords = {proof-organization},
}

@Inproceedings{Blot2016,
author="Blot, Arthur
and Dagand, Pierre-{\'E}variste
and Lawall, Julia",
SKIPeditor="Kiselyov, Oleg
and King, Andy",
title="From Sets to Bits in {Coq}",
bookTitle="Functional and Logic Programming: 13th International Symposium, FLOPS 2016, Kochi, Japan, March 4-6, 2016, Proceedings",
year="2016",
publisher="Springer International Publishing",
address="Cham",
pages="12--28",
isbn="978-3-319-29604-3",
doi="10.1007/978-3-319-29604-3_2",
SKIPurl="http://dx.doi.org/10.1007/978-3-319-29604-3_2",
keywords = {proof-organization, case-study},
}

@Inproceedings{Boutin1997,
author="Boutin, Samuel",
SKIPeditor="Abadi, Mart{\'i}n
and Ito, Takayasu",
title="Using reflection to build efficient and certified decision procedures",
bookTitle="Theoretical Aspects of Computer Software: Third International Symposium, TACS'97 Sendai, Japan, September 23--26, 1997 Proceedings",
year="1997",
publisher="Springer",
address="Berlin, Heidelberg",
pages="515--529",
isbn="978-3-540-69530-1",
doi="10.1007/BFb0014565",
SKIPurl="http://dx.doi.org/10.1007/BFb0014565",
keywords = {proof-organization},
}

@Inproceedings{Barthe1996,
author="Barthe, Gilles
and Ruys, Mark
and Barendregt, Henk",
SKIPeditor="Berardi, Stefano
and Coppo, Mario",
title="A two-level approach towards lean proof-checking",
bookTitle="Types for Proofs and Programs: International Workshop, TYPES '95 Torino, Italy, June 5--8, 1995 Selected Papers",
year="1996",
publisher="Springer",
address="Berlin, Heidelberg",
pages="16--35",
isbn="978-3-540-70722-6",
doi="10.1007/3-540-61780-9_59",
SKIPurl="http://dx.doi.org/10.1007/3-540-61780-9_59",
keywords = {proof-organization},
}

@INPROCEEDINGS{Allen1990,
author={S. F. Allen and R. L. Constable and D. J. Howe and W. E. Aitken},
booktitle={Proceedings. Fifth Annual IEEE Symposium on Logic in Computer Science},
title={The semantics of reflected proof},
year={1990},
pages={95-105},
doi={10.1109/LICS.1990.113737},
month={Jun},
keywords = {proof-organization},
}

@incollection{Gordon2000,
 author = {Gordon, Michael J. C.},
 chapter = {From {LCF} to {HOL}: A Short History},
 title = {Proof, Language, and Interaction},
 editor = {Plotkin, Gordon and Stirling, Colin and Tofte, Mads},
 year = {2000},
 isbn = {0-262-16188-5},
 pages = {169--185},
 numpages = {17},
 SKIPurl = {http://dl.acm.org/citation.cfm?id=345868.345890},
 acmid = {345890},
 publisher = {MIT Press},
 address = {Cambridge, MA, USA},
 keywords = {foundations},
}

@Inproceedings{Berghofer2002,
author="Berghofer, Stefan
and Nipkow, Tobias",
SKIPeditor="Callaghan, Paul
and Luo, Zhaohui
and McKinna, James
and Pollack, Robert",
title="Executing Higher Order Logic",
bookTitle="Types for Proofs and Programs: International Workshop, TYPES 2000 Durham, UK, December 8--12, 2000 Selected Papers",
year="2002",
publisher="Springer",
address="Berlin, Heidelberg",
pages="24--40",
isbn="978-3-540-45842-5",
doi="10.1007/3-540-45842-5_2",
SKIPurl="http://dx.doi.org/10.1007/3-540-45842-5_2"
}

@article{Scott1993,
title = "A type-theoretical alternative to {ISWIM}, {CUCH}, {OWHY}",
journal = "Theoretical Computer Science",
volume = "121",
number = "1",
pages = "411--440",
year = "1993",
issn = "0304-3975",
doi = "10.1016/0304-3975(93)90095-B",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/030439759390095B",
author = "Dana S. Scott",
}

@book{Constable1986,
 author = {Constable, R. L. and Allen, S. F. and Bromley, H. M. and Cleaveland, W. R. and Cremer, J. F. and Harper, R. W. and Howe, D. J. and Knoblock, T. B. and Mendler, N. P. and Panangaden, P. and Sasaki, J. T. and Smith, S. F.},
 title = {Implementing Mathematics with the {Nuprl} Proof Development System},
 year = {1986},
 isbn = {0-13-451832-2},
 publisher = {Prentice-Hall, Inc.},
 address = {Upper Saddle River, NJ, USA},
}

@inproceedings{Damas1982,
 author = {Damas, Luis and Milner, Robin},
 title = {Principal Type-schemes for Functional Programs},
 booktitle = {Proceedings of the 9th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '82},
 year = {1982},
 isbn = {0-89791-065-6},
 location = {Albuquerque, New Mexico},
 pages = {207--212},
 numpages = {6},
 SKIPurl = {http://doi.acm.org/10.1145/582153.582176},
 doi = {10.1145/582153.582176},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Inproceedings{Harrison2009,
author="Harrison, John",
SKIPeditor="Berghofer, Stefan
and Nipkow, Tobias
and Urban, Christian
and Wenzel, Makarius",
title="{HOL Light}: An Overview",
bookTitle="Theorem Proving in Higher Order Logics: 22nd International Conference, TPHOLs 2009, Munich, Germany, August 17-20, 2009. Proceedings",
year="2009",
publisher="Springer",
address="Berlin, Heidelberg",
pages="60--66",
isbn="978-3-642-03359-9",
doi="10.1007/978-3-642-03359-9_4",
SKIPurl="http://dx.doi.org/10.1007/978-3-642-03359-9_4"
}

@Inproceedings{Pfenning1999,
author="Pfenning, Frank
and Sch{\"u}rmann, Carsten",
title="System Description: {Twelf} --- A Meta-Logical Framework for Deductive Systems",
bookTitle="Automated Deduction --- CADE-16: 16th International Conference on Automated Deduction Trento, Italy, July 7--10, 1999 Proceedings",
year="1999",
publisher="Springer",
address="Berlin, Heidelberg",
pages="202--206",
isbn="978-3-540-48660-2",
doi="10.1007/3-540-48660-7_14",
SKIPurl="http://dx.doi.org/10.1007/3-540-48660-7_14"
}

@article{Harper2007,
 title={Mechanizing metatheory in a logical framework},
 volume={17},
 DOI={10.1017/S0956796807006430},
 number={4-5},
 journal={Journal of Functional Programming},
 publisher={Cambridge University Press},
 author={Harper, Robert and Licata, Daniel R.},
 year={2007},
 pages={613--673},
}

@Article{Dechesne2012,
author="Dechesne, Francien
and Nederpelt, Rob",
title="{N.G. de Bruijn} (1918--2012) and his Road to {Automath}, the Earliest Proof Checker",
journal="The Mathematical Intelligencer",
year="2012",
month="Dec",
day="01",
volume="34",
number="4",
pages="4--11",
issn="1866-7414",
doi="10.1007/s00283-012-9324-x",
SKIPurl="http://dx.doi.org/10.1007/s00283-012-9324-x"
}

@InProceedings{BeckertGrebing2015,
  author = {Bernhard Beckert and Sarah Grebing},
  title = {Interactive Theorem Proving - Modelling the User in the Proof Process},
  booktitle = {Workshop on Bridging the Gap between Human and Automated Reasoning -
{A} workshop of the 25th International Conference on Automated Deduction (CADE-25)},
  SKIPeditor = {Ulrich Furbach and Claudia Schon},
  volume = {1412},
  series = {CEUR Workshop Proceedings},
  publisher = {CEUR-WS.org},
  url = {http://ceur-ws.org/Vol-1412},
  year = {2015},
  month = aug
}

@InProceedings{HOFM2014raey,
  title                    = {A Usability Evaluation of Interactive Theorem Provers Using Focus Groups},
  author                   = {Bernhard Beckert and Sarah Grebing and Florian B\"ohl},
  SKIPeditor                   = {Carlos Canal and Akram Idani},
  booktitle                = {12th International Conference on Software Engineering and Formal Methods
			      ({SEFM} 2014) -- Collocated Workshops: Human-Oriented Formal Methods (HOFM 2014)},
  publisher                = {Springer},
  year                     = {2014},
  series                   = {Lecture Notes in Computer Science},
  volume                   = {8938},
  pages                    = {3--19},
  doi                      = {10.1007/978-3-319-15201-1_1},
  month                    = sep,
  place                    = {Grenoble, France},
  date                     = {September 1-2}
}

@inproceedings{Beckert2014,
  author       = {Bernhard Beckert and Sarah Grebing and Florian B\"ohl},
  title        = {How to Put Usability into Focus: {U}sing Focus Groups to Evaluate the Usability of
                  Interactive Theorem Provers},
  booktitle    = {Eleventh Workshop on User Interfaces for Theorem Provers ({UITP} 2014)},
  SKIPeditor       = {Christoph Benzm\"uller and Bruno {Woltzenlogel Paleo}},
  series       = {{EPTCS}},
  year         = {2014},
  month        = jul,
  pages        = {4--13},
  volume       = {167},
  place        = {Vienna, Austria},
  doi = {10.4204/EPTCS.167.3},
}  

@article{Harper1999,
 author = {Harper, Robert},
 title = {Proof-directed Debugging},
 journal = {J. Funct. Program.},
 issue_date = {July 1999},
 volume = {9},
 number = {4},
 month = jul,
 year = {1999},
 issn = {0956-7968},
 pages = {463--469},
 numpages = {7},
 SKIPurl = {http://dx.doi.org/10.1017/S0956796899003378},
 doi = {10.1017/S0956796899003378},
 publisher = {Cambridge University Press},
 address = {New York, NY, USA},
}

@article{Yi2006,
  title={Educational Pearl: Proof-directed debugging revisited for a first-order version},
  volume={16},
  DOI={10.1017/S0956796806006149},
  number={6},
  journal={J. Funct. Program.},
  publisher={Cambridge University Press},
  author={Yi, Kwangkeun},
  year={2006},
  pages={663--670}
}

@inproceedings{Chargueraud2010,
 author = {Chargu{\'e}raud, Arthur},
 title = {Program Verification Through Characteristic Formulae},
 booktitle = {Proceedings of the 15th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '10},
 year = {2010},
 isbn = {978-1-60558-794-3},
 location = {Baltimore, Maryland, USA},
 pages = {321--332},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/1863543.1863590},
 doi = {10.1145/1863543.1863590},
 acmid = {1863590},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Article{Braibant2014,
author="Braibant, Thomas
and Jourdan, Jacques-Henri
and Monniaux, David",
title="Implementing and Reasoning About Hash-consed Data Structures in {Coq}",
journal="Journal of Automated Reasoning",
year="2014",
month="Oct",
day="01",
volume="53",
number="3",
pages="271--304",
issn="1573-0670",
doi="10.1007/s10817-014-9306-0",
SKIPurl="https://doi.org/10.1007/s10817-014-9306-0"
}

@article{Avigad2014,
 author = {Avigad, Jeremy and Harrison, John},
 title = {Formally Verified Mathematics},
 journal = {Commun. ACM},
 issue_date = {April 2014},
 volume = {57},
 number = {4},
 month = apr,
 year = {2014},
 issn = {0001-0782},
 pages = {66--75},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/2591012},
 doi = {10.1145/2591012},
 acmid = {2591012},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@Inproceedings{Bertot2008,
author="Bertot, Yves
and Gonthier, Georges
and Ould Biha, Sidi
and Pasca, Ioana",
SKIPeditor="Mohamed, Otmane Ait
and Mu{\~{n}}oz, C{\'e}sar
and Tahar, Sofi{\`e}ne",
title="Canonical Big Operators",
bookTitle="Theorem Proving in Higher Order Logics: 21st International Conference, TPHOLs 2008, Montreal, Canada, August 18-21, 2008. Proceedings",
year="2008",
publisher="Springer",
address="Berlin, Germany",
pages="86--101",
isbn="978-3-540-71067-7",
doi="10.1007/978-3-540-71067-7_11",
SKIPurl="https://doi.org/10.1007/978-3-540-71067-7_11",
}

@article{Chargueraud2011,
   author = "Arthur Chargu{\'e}raud",
   title = "The Locally Nameless Representation",
   journal = "Journal of Automated Reasoning",
   publisher = "Springer",
   issn = "0168-7433",
   pages = "1--46",
   doi = "10.1007/s10817-011-9225-2",
   year = "2011",
   mon = may,
}

@TechReport{Leroy2007,
  author =       "Xavier Leroy",
  title =        "A locally nameless solution to the {POPLMark}
                 challenge",
  year =         "2007",
  month =        JAN,
  institution =  "INRIA",
  number =       "6098",
  type =         "Research report",
  URL =          "http://gallium.inria.fr/~xleroy/publi/POPLmark-locally-nameless.pdf",
}

@InProceedings{Aydemir2006,
  author =      {Brian Aydemir and Aaron Bohannon and Stephanie Weirich},
  title =       {Nominal Reasoning Techniques in {Coq}},
  booktitle =   {International Workshop on Logical Frameworks and 
                  Meta-Languages:Theory and Practice (LFMTP) },
  year =        2006,
  address =     {Seattle, WA, USA},
  month =       aug
}

@InProceedings{schafer2015,
author="Sch{\"a}fer, Steven
and Tebbi, Tobias
and Smolka, Gert",
SKIPeditor="Urban, Christian
and Zhang, Xingyuan",
title="Autosubst: Reasoning with {de Bruijn} Terms and Parallel Substitutions",
booktitle="Interactive Theorem Proving",
year="2015",
publisher="Springer",
address="Cham",
pages="359--374",
isbn="978-3-319-22102-1",
doi="10.1007/978-3-319-22102-1_24",
}

@InProceedings{owens2008,
author="Owens, Scott",
SKIPeditor="Drossopoulou, Sophia",
title="A Sound Semantics for {OCaml Light}",
booktitle="Programming Languages and Systems",
year="2008",
publisher="Springer",
address="Berlin, Heidelberg",
pages="1--15",
isbn="978-3-540-78739-6",
doi="10.1007/978-3-540-78739-6_1",
}

@inproceedings{Chlipala2008,
 author = {Chlipala, Adam},
 title = {Parametric Higher-order Abstract Syntax for Mechanized Semantics},
 booktitle = {Proceedings of the 13th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '08},
 year = {2008},
 isbn = {978-1-59593-919-7},
 location = {Victoria, BC, Canada},
 pages = {143--156},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/1411204.1411226},
 doi = {10.1145/1411204.1411226},
 acmid = {1411226},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {compiler verification, dependent types, interactive proof assistants, type-theoretic semantics},
}

@InProceedings{ambler2002,
author="Ambler, Simon J.
and Crole, Roy L.
and Momigliano, Alberto",
SKIPeditor="Carre{\~{n}}o, Victor A.
and Mu{\~{n}}oz, C{\'e}sar A.
and Tahar, Sofi{\`e}ne",
title="Combining Higher Order Abstract Syntax with Tactical Theorem Proving and (Co)Induction",
booktitle="Theorem Proving in Higher Order Logics",
year="2002",
publisher="Springer",
address="Berlin, Heidelberg",
pages="13--30",
isbn="978-3-540-45685-8",
doi="10.1007/3-540-45685-6_3",
}

@InProceedings{capretta2007hybrid,
author="Capretta, Venanzio
and Felty, Amy P.",
editor="Altenkirch, Thorsten
and McBride, Conor",
title="Combining {de Bruijn} Indices and Higher-Order Abstract Syntax in {Coq}",
booktitle="Types for Proofs and Programs",
year="2007",
publisher="Springer Berlin Heidelberg",
address="Berlin, Heidelberg",
pages="63--77",
isbn="978-3-540-74464-1",
doi="10.1007/978-3-540-74464-1_5",
}

@InProceedings{felty2010hoas,
author="Felty, Amy
and Pientka, Brigitte",
SKIPeditor="Kaufmann, Matt
and Paulson, Lawrence C.",
title="Reasoning with Higher-Order Abstract Syntax and Contexts: A Comparison",
booktitle="Interactive Theorem Proving",
year="2010",
publisher="Springer",
address="Berlin, Heidelberg",
pages="227--242",
isbn="978-3-642-14052-5",
doi="10.1007/978-3-642-14052-5_17",
}

@Article{felty2012hybrid,
author="Felty, Amy
and Momigliano, Alberto",
title="Hybrid: A Definitional Two-Level Approach to Reasoning with Higher-Order Abstract Syntax",
journal="Journal of Automated Reasoning",
year="2012",
month="Jan",
day="01",
volume="48",
number="1",
pages="43--105",
issn="1573-0670",
doi="10.1007/s10817-010-9194-x",
SKIPurl="https://doi.org/10.1007/s10817-010-9194-x"
}

@inproceedings{Magaud2002,
author="Magaud, Nicolas
and Bertot, Yves",
SKIPeditor="Callaghan, Paul
and Luo, Zhaohui
and McKinna, James
and Pollack, Robert",
title="Changing Data Structures in Type Theory: A Study of Natural Numbers",
series={TYPES 2000},
booktitle="Types for Proofs and Programs: International Workshop",
year="2002",
publisher="Springer",
address="Berlin, Heidelberg",
pages="181--196",
isbn="978-3-540-45842-5",
doi="10.1007/3-540-45842-5_12",
SKIPurl="https://doi.org/10.1007/3-540-45842-5_12"
}

@inproceedings{Huffman2013,
author="Huffman, Brian
and Kun{\v{c}}ar, Ond{\v{r}}ej",
SKIPeditor="Gonthier, Georges
and Norrish, Michael",
title="Lifting and Transfer: A Modular Design for Quotients in {Isabelle/HOL}",
series={CPP 2013},
booktitle="Certified Programs and Proofs: Third International Conference",
year="2013",
publisher="Springer International Publishing",
address="Cham",
pages="131--146",
isbn="978-3-319-03545-1",
doi="10.1007/978-3-319-03545-1_9",
SKIPurl="https://doi.org/10.1007/978-3-319-03545-1_9"
}

@article{ZimmermannH15,
  author    = {Th{\'{e}}o Zimmermann and
               Hugo Herbelin},
  title     = {Automatic and Transparent Transfer of Theorems along Isomorphisms
               in the {Coq} Proof Assistant},
  journal   = {CoRR},
  volume    = {abs/1505.05028},
  year      = {2015},
  SKIPurl       = {http://arxiv.org/abs/1505.05028},
  archivePrefix = {arXiv},
  eprint    = {1505.05028},
  timestamp = {Wed, 07 Jun 2017 14:40:14 +0200},
  biburl    = {http://dblp.uni-trier.de/rec/bib/journals/corr/ZimmermannH15},
  bibsource = {dblp computer science bibliography, http://dblp.org}
}

@inproceedings{Felty1994,
author="Felty, Amy
and Howe, Douglas",
SKIPeditor="Pfenning, Frank",
title="Generalization and reuse of tactic proofs",
series={LPAR '94},
booktitle="Logic Programming and Automated Reasoning: 5th International Conference",
year="1994",
publisher="Springer",
address="Berlin, Heidelberg",
pages="1--15",
isbn="978-3-540-48573-5",
doi="10.1007/3-540-58216-9_25",
SKIPurl="https://doi.org/10.1007/3-540-58216-9_25"
}

@InProceedings{pons00,
author="Pons, Olivier",
SKIPeditor="Callaghan, Paul
and Luo, Zhaohui
and McKinna, James
and Pollack, Robert
and Pollack, Robert",
title="Generalization in Type Theory Based Proof Assistants",
booktitle="Types for Proofs and Programs",
year="2002",
publisher="Springer",
address="Berlin, Heidelberg",
pages="217--232",
isbn="978-3-540-45842-5",
doi="10.1007/3-540-45842-5_14",
}

@article{Dagand17jfp,
  author    = {Pierre{-}{\'{E}}variste Dagand},
  title     = {The essence of ornaments},
  journal   = {J. Funct. Program.},
  volume    = {27},
  pages     = {e9},
  year      = {2017},
  SKIPurl       = {https://doi.org/10.1017/S0956796816000356},
  doi       = {10.1017/S0956796816000356},
  timestamp = {Sat, 27 May 2017 14:24:34 +0200},
  biburl    = {http://dblp.uni-trier.de/rec/bib/journals/jfp/Dagand17},
  bibsource = {dblp computer science bibliography, http://dblp.org}
}

@inproceedings{Williams2014,
 author = {Williams, Thomas and Dagand, Pierre-\'{E}variste and R{\'e}my, Didier},
 title = {Ornaments in Practice},
 booktitle = {Proceedings of the 10th ACM SIGPLAN Workshop on Generic Programming},
 series = {WGP '14},
 year = {2014},
 isbn = {978-1-4503-3042-8},
 location = {Gothenburg, Sweden},
 pages = {15--24},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/2633628.2633631},
 doi = {10.1145/2633628.2633631},
 acmid = {2633631},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {code inference, datatypes, dependent types, generalized algebraic datatypes, ornament, refactoring},
}

@InProceedings{Bourke12,
author="Bourke, Timothy
and Daum, Matthias
and Klein, Gerwin
and Kolanski, Rafal",
SKIPeditor="Jeuring, Johan
and Campbell, John A.
and Carette, Jacques
and Dos Reis, Gabriel
and Sojka, Petr
and Wenzel, Makarius
and Sorge, Volker",
title="Challenges and Experiences in Managing Large-Scale Proofs",
booktitle="Intelligent Computer Mathematics",
year="2012",
publisher="Springer",
address="Berlin, Heidelberg",
pages="32--48",
isbn="978-3-642-31374-5",
doi="10.1007/978-3-642-31374-5_3",
}

@inproceedings{Wilcox2015,
 author = {Wilcox, James R. and Woos, Doug and Panchekha, Pavel and Tatlock, Zachary and Wang, Xi and Ernst, Michael D. and Anderson, Thomas},
 title = {{Verdi}: A Framework for Implementing and Formally Verifying Distributed Systems},
 booktitle = {Proceedings of the 36th ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI '15},
 year = {2015},
 isbn = {978-1-4503-3468-6},
 location = {Portland, OR, USA},
 pages = {357--368},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2737924.2737958},
 doi = {10.1145/2737924.2737958},
 acmid = {2737958},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {Coq, Formal verification, Verdi, distributed systems, proof assistants},
}

@inproceedings{Chajed2019,
 author = {Chajed, Tej and Tassarotti, Joseph and Kaashoek, M. Frans and Zeldovich, Nickolai},
 title = {Argosy: Verifying Layered Storage Systems with Recovery Refinement},
 booktitle = {Proceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI 2019},
 year = {2019},
 isbn = {978-1-4503-6712-7},
 location = {Phoenix, AZ, USA},
 pages = {1054--1068},
 numpages = {15},
 SKIPurl = {http://doi.acm.org/10.1145/3314221.3314585},
 doi = {10.1145/3314221.3314585},
 acmid = {3314585},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {Kleene Algebra, Refinement},
} 

@inproceedings{Chen2015,
 author = {Chen, Haogang and Ziegler, Daniel and Chajed, Tej and Chlipala, Adam and Kaashoek, M. Frans and Zeldovich, Nickolai},
 title = {Using Crash {Hoare} Logic for Certifying the {FSCQ} File System},
 booktitle = {Proceedings of the 25th Symposium on Operating Systems Principles},
 series = {SOSP '15},
 year = {2015},
 isbn = {978-1-4503-3834-9},
 location = {Monterey, California},
 pages = {18--37},
 numpages = {20},
 SKIPurl = {http://doi.acm.org/10.1145/2815400.2815402},
 doi = {10.1145/2815400.2815402},
 acmid = {2815402},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Chajed2017,
 author = {Chen, Haogang and Chajed, Tej and Konradi, Alex and Wang, Stephanie and \.{I}leri, Atalay and Chlipala, Adam and Kaashoek, M. Frans and Zeldovich, Nickolai},
 title = {Verifying a High-performance Crash-safe File System Using a Tree Specification},
 booktitle = {Proceedings of the 26th Symposium on Operating Systems Principles},
 series = {SOSP '17},
 year = {2017},
 isbn = {978-1-4503-5085-3},
 location = {Shanghai, China},
 pages = {270--286},
 numpages = {17},
 SKIPurl = {http://doi.acm.org/10.1145/3132747.3132776},
 doi = {10.1145/3132747.3132776},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Bhargavan2017,
  author =	{Karthikeyan Bhargavan and Barry Bond and Antoine Delignat-Lavaud and C{\'e}dric Fournet and Chris Hawblitzel and Catalin Hritcu and Samin Ishtiaq and Markulf Kohlweiss and Rustan Leino and Jay Lorch and Kenji Maillard and Jianyang Pan and Bryan Parno and Jonathan Protzenko and Tahina Ramananandro and Ashay Rane and Aseem Rastogi and Nikhil Swamy and Laure Thompson and Peng Wang and Santiago Zanella-B{\'e}guelin and Jean-Karim Zinzindohou{\'e}},
  title =	{{Everest}: Towards a Verified, Drop-in Replacement of {HTTPS}},
  booktitle =	{2nd Summit on Advances in Programming Languages (SNAPL 2017)},
  pages =	{1:1--1:12},
  series =	{Leibniz International Proceedings in Informatics (LIPIcs)},
  ISBN =	{978-3-95977-032-3},
  ISSN =	{1868-8969},
  year =	{2017},
  volume =	{71},
  SKIPeditor =	{Benjamin S. Lerner and Rastislav Bod{\'i}k and Shriram Krishnamurthi},
  publisher =	{Schloss Dagstuhl--Leibniz-Zentrum fuer Informatik},
  address =	{Dagstuhl, Germany},
  SKIPURL =		{http://drops.dagstuhl.de/opus/volltexte/2017/7119},
  URN =		{urn:nbn:de:0030-drops-71196},
  doi =		{10.4230/LIPIcs.SNAPL.2017.1},
}

@InProceedings{Frana2011,
  author =	{Ricardo Bedin Fran{\c{c}}a and Denis Favre-Felix and Xavier Leroy and Marc Pantel and Jean Souyris},
  title =	{{Towards Formally Verified Optimizing Compilation in Flight Control Software}},
  booktitle =	{Bringing Theory to Practice: Predictability and Performance in Embedded Systems},
  pages =	{59--68},
  series =	{OpenAccess Series in Informatics (OASIcs)},
  ISBN =	{978-3-939897-28-6},
  ISSN =	{2190-6807},
  year =	{2011},
  volume =	{18},
  SKIPeditor =	{Philipp Lucas and Lothar Thiele and Benoit Triquet and Theo Ungerer and Reinhard Wilhelm},
  publisher =	{Schloss Dagstuhl--Leibniz-Zentrum fuer Informatik},
  address =	{Dagstuhl, Germany},
  SKIPURL =		{http://drops.dagstuhl.de/opus/volltexte/2011/3082},
  URN =		{urn:nbn:de:0030-drops-30824},
  doi =		{10.4230/OASIcs.PPES.2011.59},
}

@INPROCEEDINGS{DelignatLavaud2017,
author={A. Delignat-Lavaud and C. Fournet and M. Kohlweiss and J. Protzenko and A. Rastogi and N. Swamy and S. Zanella-Beguelin and K. Bhargavan and J. Pan and J. K. Zinzindohoue},
booktitle={2017 IEEE Symposium on Security and Privacy (SP)},
title={Implementing and Proving the {TLS} 1.3 Record Layer},
year={2017},
pages={463--482},
doi={10.1109/SP.2017.58},
month={May},}

@inproceedings{Lesani2016,
 author = {Lesani, Mohsen and Bell, Christian J. and Chlipala, Adam},
 title = {{Chapar}: Certified Causally Consistent Distributed Key-value Stores},
 booktitle = {Proceedings of the 43rd Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '16},
 year = {2016},
 isbn = {978-1-4503-3549-2},
 location = {St. Petersburg, FL, USA},
 pages = {357--370},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/2837614.2837622},
 doi = {10.1145/2837614.2837622},
 acmid = {2837622},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{deMoura2015,
author="de Moura, Leonardo
and Kong, Soonho
and Avigad, Jeremy
and van Doorn, Floris
and von Raumer, Jakob",
SKIPeditor="Felty, Amy P.
and Middeldorp, Aart",
title="The {Lean} Theorem Prover (System Description)",
bookTitle="Automated Deduction - CADE-25: 25th International Conference on Automated Deduction, Berlin, Germany, August 1-7, 2015, Proceedings",
year="2015",
publisher="Springer International Publishing",
address="Cham",
pages="378--388",
isbn="978-3-319-21401-6",
doi="10.1007/978-3-319-21401-6_26",
SKIPurl="https://doi.org/10.1007/978-3-319-21401-6_26"
}

@misc{coqincoq,
 author = {Bruno Barras and Benjamin Werner},
 title = {{Coq} in {Coq}},
 year = {1997},
 url = {http://www.lix.polytechnique.fr/Labo/Bruno.Barras/publi/coqincoq.pdf}
}

@misc{coqhammer,
 author="Czajka, {\L}ukasz and Kaliszyk, Cezary and Ekici, Burak",
 title = {{CoqHammer}: Automation for Dependent Type Theory},
 year = {2018},
 url = {http://cl-informatik.uibk.ac.at/cek/coqhammer/},
}

@Article{Czajka2018,
author="Czajka, {\L}ukasz
and Kaliszyk, Cezary",
title="Hammer for {Coq}: Automation for Dependent Type Theory",
journal="Journal of Automated Reasoning",
year="2018",
month=jun,
day="01",
volume="61",
number="1",
pages="423--453",
issn="1573-0670",
doi="10.1007/s10817-018-9458-4",
SKIPurl="https://doi.org/10.1007/s10817-018-9458-4"
}

@Article{Kaliszyk2014,
author="Kaliszyk, Cezary
and Urban, Josef",
title="Learning-Assisted Automated Reasoning with {Flyspeck}",
journal="Journal of Automated Reasoning",
year="2014",
month="Aug",
day="01",
volume="53",
number="2",
pages="173--213",
issn="1573-0670",
doi="10.1007/s10817-014-9303-3",
SKIPurl="https://doi.org/10.1007/s10817-014-9303-3"
}

@Inproceedings{Appel2011,
author="Appel, Andrew W.",
SKIPeditor="Barthe, Gilles",
title="Verified Software Toolchain",
bookTitle="Programming Languages and Systems: 20th European Symposium on Programming, ESOP 2011, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2011, Saarbr{\"u}cken, Germany, March 26--April 3, 2011. Proceedings",
year="2011",
publisher="Springer",
address="Berlin, Heidelberg",
pages="1--17",
isbn="978-3-642-19718-5",
doi="10.1007/978-3-642-19718-5_1",
SKIPurl="https://doi.org/10.1007/978-3-642-19718-5_1"
}

@Inproceedings{Garillot2009,
author="Garillot, Fran{\c{c}}ois
and Gonthier, Georges
and Mahboubi, Assia
and Rideau, Laurence",
SKIPeditor="Berghofer, Stefan
and Nipkow, Tobias
and Urban, Christian
and Wenzel, Makarius",
title="Packaging Mathematical Structures",
bookTitle="Theorem Proving in Higher Order Logics: 22nd International Conference, TPHOLs 2009, Munich, Germany, August 17-20, 2009. Proceedings",
year="2009",
publisher="Springer",
address="Berlin, Heidelberg",
pages="327--342",
isbn="978-3-642-03359-9",
doi="10.1007/978-3-642-03359-9_23",
SKIPurl="https://doi.org/10.1007/978-3-642-03359-9_23"
}

@misc{MathComp,
  title = {Mathematical Components Project},
  key = {MathComp},
  url = {https://math-comp.github.io/math-comp/},
}

@inproceedings{Gonthier2013b,
 author = {Gonthier, Georges},
 title = {Engineering Mathematics: The Odd Order Theorem Proof},
 booktitle = {Proceedings of the 40th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '13},
 year = {2013},
 isbn = {978-1-4503-1832-7},
 location = {Rome, Italy},
 pages = {1--2},
 numpages = {2},
 SKIPurl = {http://doi.acm.org/10.1145/2429069.2429071},
 doi = {10.1145/2429069.2429071},
 acmid = {2429071},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Book{Nipkow2002,
  author	= {Tobias Nipkow and Lawrence C. Paulson and Markus Wenzel},
  title		= {{Isabelle/HOL} --- A Proof Assistant for Higher-Order Logic},
  publisher	= {Springer},
  series	= {LNCS},
  volume	= 2283,
  year		= 2002
}

@inproceedings{Ekici2017,
author="Ekici, Burak
and Mebsout, Alain
and Tinelli, Cesare
and Keller, Chantal
and Katz, Guy
and Reynolds, Andrew
and Barrett, Clark",
SKIPeditor="Majumdar, Rupak
and Kun{\v{c}}ak, Viktor",
title="{SMTCoq}: A Plug-In for Integrating {SMT} Solvers into {Coq}",
bookTitle="Computer Aided Verification: 29th International Conference, CAV 2017, Heidelberg, Germany, July 24-28, 2017, Proceedings, Part II",
year="2017",
publisher="Springer International Publishing",
address="Cham",
pages="126--133",
isbn="978-3-319-63390-9",
doi="10.1007/978-3-319-63390-9_7",
SKIPurl="https://doi.org/10.1007/978-3-319-63390-9_7"
}

@InProceedings{Keller2012,
  author =	{Chantal Keller and Marc Lasson},
  title =	{{Parametricity in an Impredicative Sort}},
  booktitle =	{Computer Science Logic (CSL'12) - 26th International Workshop/21st Annual Conference of the EACSL},
  pages =	{381--395},
  series =	{Leibniz International Proceedings in Informatics (LIPIcs)},
  ISBN =	{978-3-939897-42-2},
  ISSN =	{1868-8969},
  year =	{2012},
  volume =	{16},
  SKIPeditor =	{Patrick C{\'e}gielski and Arnaud Durand},
  publisher =	{Schloss Dagstuhl--Leibniz-Zentrum fuer Informatik},
  address =	{Dagstuhl, Germany},
  SKIPURL =		{http://drops.dagstuhl.de/opus/volltexte/2012/3685},
  URN =		{urn:nbn:de:0030-drops-36851},
  doi =		{10.4230/LIPIcs.CSL.2012.381},
}

@article{Dave2003,
 author = {Dave, Maulik A.},
 title = {Compiler Verification: A Bibliography},
 journal = {SIGSOFT Softw. Eng. Notes},
 issue_date = {November 2003},
 volume = {28},
 number = {6},
 month = nov,
 year = {2003},
 issn = {0163-5948},
 pages = {2--2},
 numpages = {1},
 SKIPurl = {http://doi.acm.org/10.1145/966221.966235},
 doi = {10.1145/966221.966235},
 acmid = {966235},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Celik2017,
  author = {Celik, Ahmet and Palmskog, Karl and Gligoric, Milos},
  title = {{iCoq}: Regression Proof Selection for Large-Scale Verification Projects},
  booktitle = {32nd IEEE/ACM International Conference on Automated Software Engineering},
  series = {ASE 2017},
  pages = {171--182},
  year = {2017},
  doi = {10.1109/ASE.2017.8115630},
}

@inproceedings{Ringer2018,
 author = {Ringer, Talia and Yazdani, Nathaniel and Leo, John and Grossman, Dan},
 title = {Adapting Proof Automation to Adapt Proofs},
 booktitle = {Proceedings of the 7th ACM SIGPLAN International Conference on Certified Programs and Proofs},
 series = {CPP 2018},
 year = {2018},
 isbn = {978-1-4503-5586-5},
 location = {Los Angeles, CA, USA},
 pages = {115--129},
 numpages = {15},
 SKIPurl = {http://doi.acm.org/10.1145/3167094},
 doi = {10.1145/3167094},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Ringer2019,
title={Ornaments for Proof Reuse in Coq},
author={Ringer, Talia and Yazdani, Nathaniel and Leo, John and Grossman, Dan},
booktitle = {Interactive Theorem Proving},
year={2019},
}

@phdthesis{GarillotPhD,
   title = {Generic Proof Tools and Finite Group Theory},
   author = {Fran\c{c}ois Garillot},
   school = {\'{E}cole Polytechnique},
   address = {Palaiseau, France},
   year = {2011}
}

@mastersthesis{wibergh2019,
  title={Automatic refactoring for Agda},
  author={Wibergh, Karin},
  year={2019},
  school={Chalmers University of Technology and University of Gothenburg},
  keywords={proof-development}
}

@phdthesis{NorellPhD,
  author  = {Ulf Norell},
  title	  = {Towards a practical programming language based on dependent type
	     theory},
  school  = {Department of Computer Science and Engineering, Chalmers University of Technology},
  year	  = 2007,
  month	  = {September},
}

@phdthesis{WhitesidePhD,
  author = {Whiteside, Iain Johnston},
  title = {Refactoring proofs},
  school = {University of Edinburgh},
  year = 2013,
  month = {November},
  url = {http://hdl.handle.net/1842/7970},
}

@article{Appel2017,
	author = {Appel, Andrew W. and Beringer, Lennart and Chlipala, Adam and Pierce, Benjamin C. and Shao, Zhong and Weirich, Stephanie and Zdancewic, Steve},
	title = {Position paper: the science of deep specification},
	volume = {375},
	number = {2104},
	year = {2017},
	doi = {10.1098/rsta.2016.0331},
	publisher = {The Royal Society},
	issn = {1364-503X},
	SKIPURL = {http://rsta.royalsocietypublishing.org/content/375/2104/20160331},
	eprint = {http://rsta.royalsocietypublishing.org/content/375/2104/20160331.full.pdf},
	journal = {Philosophical Transactions of the Royal Society of London A: Mathematical, Physical and Engineering Sciences}
}

@incollection{Harrison2014,
title = "History of Interactive Theorem Proving",
editor = "J{\"o}rg H. Siekmann",
series = "Handbook of the History of Logic",
publisher = "North-Holland",
volume = "9",
number = "Supplement C",
pages = "135--214",
year = "2014",
booktitle = "Computational Logic",
issn = "1874-5857",
doi = "10.1016/B978-0-444-51624-4.50004-6",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/B9780444516244500046",
author = "John Harrison and Josef Urban and Freek Wiedijk"
}

@inproceedings{Bauer2017,
 author = {Bauer, Andrej and Gross, Jason and Lumsdaine, Peter LeFanu and Shulman, Michael and Sozeau, Matthieu and Spitters, Bas},
 title = {The {HoTT} Library: A Formalization of Homotopy Type Theory in {Coq}},
 booktitle = {Proceedings of the 6th ACM SIGPLAN Conference on Certified Programs and Proofs},
 series = {CPP 2017},
 year = {2017},
 isbn = {978-1-4503-4705-1},
 location = {Paris, France},
 pages = {164--172},
 numpages = {9},
 SKIPurl = {http://doi.acm.org/10.1145/3018610.3018615},
 doi = {10.1145/3018610.3018615},
 acmid = {3018615},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {Coq, Higher inductive types, Homotopy type theory, Univalent foundations, Universe polymorphism},
} 

@inproceedings{Pugh1991,
 author = {Pugh, William},
 title = {The {Omega} Test: A Fast and Practical Integer Programming Algorithm for Dependence Analysis},
 booktitle = {Proceedings of the 1991 ACM/IEEE Conference on Supercomputing},
 series = {Supercomputing '91},
 year = {1991},
 isbn = {0-89791-459-7},
 location = {Albuquerque, New Mexico, USA},
 pages = {4--13},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/125826.125848},
 doi = {10.1145/125826.125848},
 acmid = {125848},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Article{Kaliszyk2015,
author="Kaliszyk, Cezary
and Urban, Josef",
title="{HOL(y)Hammer}: Online {ATP} Service for {HOL Light}",
journal="Mathematics in Computer Science",
year="2015",
month="Mar",
day="01",
volume="9",
number="1",
pages="5--22",
issn="1661-8289",
doi="10.1007/s11786-014-0182-0",
SKIPurl="https://doi.org/10.1007/s11786-014-0182-0"
}

@inproceedings{Keuchel2013,
 author = {Keuchel, Steven and Schrijvers, Tom},
 title = {Generic Datatypes \`{a} La Carte},
 booktitle = {Proceedings of the 9th ACM SIGPLAN Workshop on Generic Programming},
 series = {WGP '13},
 year = {2013},
 isbn = {978-1-4503-2389-5},
 location = {Boston, Massachusetts, USA},
 pages = {13--24},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2502488.2502491},
 doi = {10.1145/2502488.2502491},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Benton2006,
  author = {Benton, Nick},
  title = {Machine obstructed proof},
  booktitle = {ACM SIGPLAN Workshop on Mechanizing Metatheory},
  year = {2006},
  url = {https://www.seas.upenn.edu/~sweirich/wmm/wmm06/03-benton.pdf},
}

@InProceedings{Hurd2011,
author="Hurd, Joe",
SKIPeditor="Bobaru, Mihaela
and Havelund, Klaus
and Holzmann, Gerard J.
and Joshi, Rajeev",
title="The {OpenTheory} Standard Theory Library",
booktitle="NASA Formal Methods",
year="2011",
publisher="Springer",
address="Berlin, Germany",
pages="177--191",
isbn="978-3-642-20398-5"
}

@Article{Strachey2000,
author="Strachey, Christopher",
title="Fundamental Concepts in Programming Languages",
journal="Higher-Order and Symbolic Computation",
year="2000",
month="Apr",
day="01",
volume="13",
number="1",
pages="11--49",
issn="1573-0557",
doi="10.1023/A:1010000313106",
SKIPurl="https://doi.org/10.1023/A:1010000313106"
}

@inproceedings{Wadler1989,
 author = {Wadler, P. and Blott, S.},
 title = {How to Make Ad-hoc Polymorphism Less Ad Hoc},
 booktitle = {Proceedings of the 16th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '89},
 year = {1989},
 isbn = {0-89791-294-2},
 location = {Austin, Texas, USA},
 pages = {60--76},
 numpages = {17},
 SKIPurl = {http://doi.acm.org/10.1145/75277.75283},
 doi = {10.1145/75277.75283},
 acmid = {75283},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Misc{HarperModules2011,
  author = {Robert Harper},
  title = {Modules Matter Most},
  url = {https://existentialtype.wordpress.com/2011/04/16/modules-matter-most/},
  year = {2011},
}

@article{Spitters2011,
  title={Type classes for mathematics in type theory},
  volume={21},
  doi={10.1017/S0960129511000119},
  number={4},
  journal={Mathematical Structures in Computer Science},
  publisher={Cambridge University Press},
  author={Spitters, Bas and van der Weegen, Eelis},
  year={2011},
  pages={795--825}
}

@InProceedings{Haftmann2006,
author="Haftmann, Florian
and Wenzel, Makarius",
editor="Altenkirch, Thorsten
and McBride, Conor",
title="Constructive Type Classes in {Isabelle}",
booktitle="Types for Proofs and Programs",
year="2007",
publisher="Springer",
address="Berlin, Heidelberg",
pages="160--174",
isbn="978-3-540-74464-1",
doi="10.1007/978-3-540-74464-1_11",
}

@inproceedings{Dreyer2007,
 author = {Dreyer, Derek and Harper, Robert and Chakravarty, Manuel M. T. and Keller, Gabriele},
 title = {Modular Type Classes},
 booktitle = {Proceedings of the 34th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '07},
 year = {2007},
 isbn = {1-59593-575-4},
 location = {Nice, France},
 pages = {63--70},
 numpages = {8},
 SKIPurl = {http://doi.acm.org/10.1145/1190216.1190229},
 doi = {10.1145/1190216.1190229},
 acmid = {1190229},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Robinson1965,
 author = {Robinson, J. A.},
 title = {A Machine-Oriented Logic Based on the Resolution Principle},
 journal = {J. ACM},
 issue_date = {Jan. 1965},
 volume = {12},
 number = {1},
 month = jan,
 year = {1965},
 issn = {0004-5411},
 pages = {23--41},
 numpages = {19},
 SKIPurl = {http://doi.acm.org/10.1145/321250.321253},
 doi = {10.1145/321250.321253},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{wenzel1999isar,
author="Wenzel, Markus",
SKIPeditor="Bertot, Yves
and Dowek, Gilles
and Th{\'e}ry, Laurent
and Hirschowitz, Andr{\'e}
and Paulin, Christine",
title="{Isar} --- A Generic Interpretative Approach to Readable Formal Proof Documents",
booktitle="Theorem Proving in Higher Order Logics",
year="1999",
publisher="Springer",
address="Berlin, Heidelberg",
pages="167--183",
isbn="978-3-540-48256-7",
doi="10.1007/3-540-48256-3_12",
}

@inproceedings{trybulec1985computer,
  title={Computer Assisted Reasoning with {Mizar}},
  author={Trybulec, Andrzej and Blair, Howard A},
  booktitle={IJCAI},
  volume={85},
  pages={26--28},
  year={1985},
  organization={Citeseer}
}

@techreport{giero2003mmode,
  title={{MMode}, a {Mizar} mode for the proof assistant {Coq}},
  author={Giero, Mariusz and Wiedijk, Frederik},
  institute = {Radboud Universiteit Nijmegen},
  year={2003},
  url = {http://www.cs.kun.nl/~freek/mmode/mmode.pdf},
}

@InProceedings{wiedijk2001mizar,
author="Wiedijk, Freek",
SKIPeditor="Boulton, Richard J.
and Jackson, Paul B.",
title="{Mizar Light} for {HOL Light}",
booktitle="Theorem Proving in Higher Order Logics",
year="2001",
publisher="Springer",
address="Berlin, Heidelberg",
pages="378--393",
isbn="978-3-540-44755-9",
doi="10.1007/3-540-44755-5_26",
}

@article{SterlingH17,
  author    = {Jonathan Sterling and
               Robert Harper},
  title     = {Algebraic Foundations of Proof Refinement},
  journal   = {CoRR},
  volume    = {abs/1703.05215},
  year      = {2017},
  SKIPurl       = {http://arxiv.org/abs/1703.05215},
  archivePrefix = {arXiv},
  eprint    = {1703.05215},
  timestamp = {Wed, 07 Jun 2017 14:41:19 +0200},
  biburl    = {http://dblp.org/rec/bib/journals/corr/SterlingH17},
  bibsource = {dblp computer science bibliography, http://dblp.org}
}

@InProceedings{Dietrich2013,
author="Dietrich, Dominik
and Whiteside, Iain
and Aspinall, David",
SKIPeditor="McMillan, Ken
and Middeldorp, Aart
and Voronkov, Andrei",
title="Polar: A Framework for Proof Refactoring",
booktitle="Logic for Programming, Artificial Intelligence, and Reasoning",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="776--791",
isbn="978-3-642-45221-5",
doi="10.1007/978-3-642-45221-5_52",
keywords = {proof-development},
}

@InProceedings{adams2015,
author="Adams, Mark",
editor="Bianculli, Domenico
and Calinescu, Radu
and Rumpe, Bernhard",
title="Refactoring Proofs with Tactician",
booktitle="Software Engineering and Formal Methods",
year="2015",
publisher="Springer Berlin Heidelberg",
address="Berlin, Heidelberg",
pages="53--67",
isbn="978-3-662-49224-6",
doi="10.1007/978-3-662-49224-6_6",
keywords={proof-development}
}

@article{chan2011galileo,
  title={{GALILEO}: A system for automating ontology evolution},
  author={Chan, Michael and Lehmann, Jos and Bundy, Alan},
  journal={ARCOE-11},
  pages={46},
  year={2011},
  keywords={proof-development}
}

@InProceedings{gauthier2014,
author="Gauthier, Thibault
and Kaliszyk, Cezary",
SKIPeditor="Watt, Stephen M.
and Davenport, James H.
and Sexton, Alan P.
and Sojka, Petr
and Urban, Josef",
title="Matching Concepts across {HOL} Libraries",
booktitle="Intelligent Computer Mathematics",
year="2014",
publisher="Springer",
address="Cham",
pages="267--281",
isbn="978-3-319-08434-3",
doi="10.1007/978-3-319-08434-3_20",
keywords={proof-development}
}

@article{gauthier2017,
title = "Aligning concepts across proof assistant libraries",
journal = "Journal of Symbolic Computation",
volume = "90",
pages = "89--123",
year = "2019",
note = "Symbolic Computation in Software Science",
issn = "0747-7171",
doi = "10.1016/j.jsc.2018.04.005",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0747717118300348",
author = "Thibault Gauthier and Cezary Kaliszyk",
}

@inproceedings{Caplan1995,
 author = {Caplan, Joshua E. and Harandi, Mehdi T.},
 title = {A Logical Framework for Software Proof Reuse},
 booktitle = {Proceedings of the 1995 Symposium on Software Reusability},
 series = {SSR '95},
 year = {1995},
 isbn = {0-89791-739-1},
 location = {Seattle, Washington, USA},
 pages = {106--113},
 numpages = {8},
 SKIPurl = {http://doi.acm.org/10.1145/211782.211821},
 doi = {10.1145/211782.211821},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords={proof-organization}
}

@article{ko2016,
  title={Programming with ornaments},
  volume={27},
  doi={10.1017/S0956796816000307},
  journal={Journal of Functional Programming},
  publisher={Cambridge University Press},
  author={Ko, Hsiang-Shang and Gibbons, Jeremy},
  year={2016},
  pages={e2}
}

@misc{mcbride2010,
  title={Ornamental algebras, algebraic ornaments},
  author={McBride, Conor},
  url={http://plv.mpi-sws.org/plerg/papers/mcbride-ornaments-2up.pdf},
  year={2011},
  accessed={February 6th, 2019}
}

@article{BERTOT1998,
title = {A Generic Approach to Building User Interfaces for Theorem Provers},
journal = {Journal of Symbolic Computation},
volume = {25},
number = {2},
pages = {161 - 194},
year = {1998},
issn = {0747-7171},
doi = {10.1006/jsco.1997.0171},
SKIPurl = {http://www.sciencedirect.com/science/article/pii/S0747717197901711},
author = {Yves Bertot and Laurent Th{\'e}ry},
keywords = {proof-development}
}

@InProceedings{Garillot-al:TPHOL09,
author="Garillot, Fran{\c{c}}ois
and Gonthier, Georges
and Mahboubi, Assia
and Rideau, Laurence",
SKIPeditor="Berghofer, Stefan
and Nipkow, Tobias
and Urban, Christian
and Wenzel, Makarius",
title="Packaging Mathematical Structures",
booktitle="Theorem Proving in Higher Order Logics",
year="2009",
publisher="Springer",
address="Berlin, Heidelberg",
pages="327--342",
isbn="978-3-642-03359-9",
doi="10.1007/978-3-642-03359-9_23",
}

@Article{Bentkamp-al:ITP17,
author="Bentkamp, Alexander
and Blanchette, Jasmin Christian
and Klakow, Dietrich",
title="A Formal Proof of the Expressiveness of Deep Learning",
journal="Journal of Automated Reasoning",
year="2019",
month="Aug",
day="01",
volume="63",
number="2",
pages="347--368",
issn="1573-0670",
doi="10.1007/s10817-018-9481-5",
SKIPurl="https://doi.org/10.1007/s10817-018-9481-5"
}

@book{Sergey:PnP,
  author = {Ilya Sergey},
  title = {{Programs and Proofs: Mechanizing Mathematics with
                  Dependent Types}},
  year = {2014},
  url = {http://ilyasergey.net/pnp},
}


@book{Maboubi-Tassi:MathComp,
  author = {Assia Mahboubi and Enrico Tassi},
  title = {Mathematical Components},
  year = {2017},
  url = {https://math-comp.github.io/mcb},
}

@inproceedings{Chlipala:PLDI11,
 author = {Chlipala, Adam},
 title = {Mostly-automated Verification of Low-level Programs in Computational Separation Logic},
 booktitle = {Proceedings of the 32Nd ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI '11},
 year = {2011},
 isbn = {978-1-4503-0663-8},
 location = {San Jose, California, USA},
 pages = {234--245},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/1993498.1993526},
 doi = {10.1145/1993498.1993526},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Nanevski-al:POPL10,
 author = {Nanevski, Aleksandar and Vafeiadis, Viktor and Berdine, Josh},
 title = {Structuring the Verification of Heap-manipulating Programs},
 booktitle = {Proceedings of the 37th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '10},
 year = {2010},
 isbn = {978-1-60558-479-9},
 location = {Madrid, Spain},
 pages = {261--274},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/1706299.1706331},
 doi = {10.1145/1706299.1706331},
 acmid = {1706331},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{LeyWild-Nanevski:POPL13,
 author = {Ley-Wild, Ruy and Nanevski, Aleksandar},
 title = {Subjective Auxiliary State for Coarse-grained Concurrency},
 booktitle = {Proceedings of the 40th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '13},
 year = {2013},
 isbn = {978-1-4503-1832-7},
 location = {Rome, Italy},
 pages = {561--574},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/2429069.2429134},
 doi = {10.1145/2429069.2429134},
 acmid = {2429134},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Nanevski-al:ESOP14,
author="Nanevski, Aleksandar
and Ley-Wild, Ruy
and Sergey, Ilya
and Delbianco, Germ{\'a}n Andr{\'e}s",
editor="Shao, Zhong",
title="Communicating State Transition Systems for Fine-Grained Concurrent Resources",
booktitle="Programming Languages and Systems",
year="2014",
publisher="Springer",
address="Berlin, Heidelberg",
pages="290--310",
isbn="978-3-642-54833-8",
doi="10.1007/978-3-642-54833-8_16",
}

@inproceedings{Sergey-al:PLDI15,
 author = {Sergey, Ilya and Nanevski, Aleksandar and Banerjee, Anindya},
 title = {Mechanized Verification of Fine-grained Concurrent Programs},
 booktitle = {Proceedings of the 36th ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI '15},
 year = {2015},
 isbn = {978-1-4503-3468-6},
 location = {Portland, OR, USA},
 pages = {77--87},
 numpages = {11},
 SKIPurl = {http://doi.acm.org/10.1145/2737924.2737964},
 doi = {10.1145/2737924.2737964},
 acmid = {2737964},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Gu-al:OSDI16,
  author    = {Ronghui Gu and
               Zhong Shao and
               Hao Chen and
               Xiongnan (Newman) Wu and
               Jieung Kim and
               Vilhelm Sj{\"{o}}berg and
               David Costanzo},
  title     = {{CertiKOS}: An Extensible Architecture for Building
                  Certified Concurrent {OS} Kernels},
  booktitle = {OSDI},
  publisher = {{USENIX} Association},
  pages     = {653--669},
  year      = {2016},
}

@inproceedings{Gu-al:POPL15,
 author = {Gu, Ronghui and Koenig, J{\'e}r{\'e}mie and Ramananandro, Tahina and Shao, Zhong and Wu, Xiongnan and Weng, Shu-Chun and Zhang, Haozhong and Guo, Yu},
 title = {Deep Specifications and Certified Abstraction Layers},
 booktitle = {Proceedings of the 42Nd Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '15},
 year = {2015},
 isbn = {978-1-4503-3300-9},
 location = {Mumbai, India},
 pages = {595--608},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/2676726.2676975},
 doi = {10.1145/2676726.2676975},
 acmid = {2676975},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Leroy:POPL06,
 author = {Leroy, Xavier},
 title = {Formal Certification of a Compiler Back-end or: Programming a Compiler with a Proof Assistant},
 booktitle = {Conference Record of the 33rd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '06},
 year = {2006},
 isbn = {1-59593-027-2},
 location = {Charleston, South Carolina, USA},
 pages = {42--54},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/1111037.1111042},
 doi = {10.1145/1111037.1111042},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Krebbers-al:POPL17,
 author = {Krebbers, Robbert and Timany, Amin and Birkedal, Lars},
 title = {Interactive Proofs in Higher-order Concurrent Separation Logic},
 booktitle = {Proceedings of the 44th ACM SIGPLAN Symposium on Principles of Programming Languages},
 series = {POPL 2017},
 year = {2017},
 isbn = {978-1-4503-4660-3},
 location = {Paris, France},
 pages = {205--217},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/3009837.3009855},
 doi = {10.1145/3009837.3009855},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Igarashi-al:TOPLAS01,
 author = {Igarashi, Atsushi and Pierce, Benjamin C. and Wadler, Philip},
 title = {Featherweight Java: A Minimal Core Calculus for Java and GJ},
 journal = {ACM Trans. Program. Lang. Syst.},
 issue_date = {May 2001},
 volume = {23},
 number = {3},
 month = may,
 year = {2001},
 issn = {0164-0925},
 pages = {396--450},
 numpages = {55},
 SKIPurl = {http://doi.acm.org/10.1145/503502.503505},
 doi = {10.1145/503502.503505},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Book{Appel:BOOK14, 
	Author = {Andrew W. Appel and
                  Robert Dockins and
                  Aquinas Hobor and
                  Lennart Beringer and
                  Josiah Dodds and
                  Gordon Stewart and
                  Sandrine Blazy and 
                  Xavier Leroy},
	Title = {Program Logics for Certified Compilers},
	doi = {10.1017/CBO9781107256552},
	Publisher = {Cambridge University Press},
	address = {Cambridge, UK},
	Year = {2014}
} 

@book{pierce2002types,
  title={Types and programming languages},
  author={Pierce, Benjamin C},
  year={2002},
  publisher={MIT press}
}

@book{harper2016practical,
  title={Practical foundations for programming languages},
  author={Harper, Robert},
  year={2016},
  publisher={Cambridge University Press},
  doi = {10.1017/CBO9781316576892},
  edition = {2nd},
  address = {Cambridge, UK},
}

@book{Nipkow2014concrete,
 author = {Nipkow, Tobias and Klein, Gerwin},
 title = {Concrete Semantics: With {Isabelle/HOL}},
 year = {2014},
 isbn = {3319105418, 9783319105413},
 publisher = {Springer},
 doi = {10.1007/978-3-319-10542-0},
} 

@book{Pierce-al:SF,
  author = {Benjamin C. Pierce and Chris Casinghino and Marco Gaboardi and
                  Michael Greenberg and C\v{a}t\v{a}lin Hri\c{t}cu 
                  and Vilhelm Sj\"{o}berg and Brent Yorgey},
  title = {{Software Foundations}},
  year = {2014},
  publisher = {Electronic textbook},
  url = {http://www.cis.upenn.edu/~bcpierce/sf},
}

@book{Bradley2007,
 author = {Bradley, Aaron R. and Manna, Zohar},
 title = {The Calculus of Computation: Decision Procedures with Applications to Verification},
 year = {2007},
 isbn = {3540741127},
 publisher = {Springer},
 address = {Berlin, Heidelberg},
 doi={10.1007/978-3-540-74113-8},
} 

@book{Kroening2008,
 author = {Kroening, Daniel and Strichman, Ofer},
 title = {Decision Procedures: An Algorithmic Point of View},
 year = {2008},
 isbn = {3540741046, 9783540741046},
 edition = {1},
 publisher = {Springer},
 doi = {10.1007/978-3-540-74105-3},
}

@inproceedings{Weirich-al:ICFP11,
 author = {Weirich, Stephanie and Yorgey, Brent A. and Sheard, Tim},
 title = {Binders Unbound},
 booktitle = {Proceedings of the 16th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '11},
 year = {2011},
 isbn = {978-1-4503-0865-6},
 location = {Tokyo, Japan},
 pages = {333--345},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/2034773.2034818},
 doi = {10.1145/2034773.2034818},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@book{Graham:BOOK,
 author = {Graham, Paul},
 title = {{ANSI Common Lisp}},
 year = {1996},
 publisher = {Prentice Hall Press},
} 

@InProceedings{Kim-al:APLAS17,
author="Kim, Jieung
and Sj{\"o}berg, Vilhelm
and Gu, Ronghui
and Shao, Zhong",
SKIPeditor="Chang, Bor-Yuh Evan",
title="Safety and Liveness of {MCS} Lock---Layer by Layer",
booktitle="Programming Languages and Systems",
year="2017",
publisher="Springer",
address="Cham",
pages="273--297",
isbn="978-3-319-71237-6",
doi="10.1007/978-3-319-71237-6_14",
}

@article{Sergey-al:POPL18,
 author = {Sergey, Ilya and Wilcox, James R. and Tatlock, Zachary},
 title = {Programming and Proving with Distributed Protocols},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {January 2018},
 volume = {2},
 number = {POPL},
 month = dec,
 year = {2017},
 issn = {2475-1421},
 pages = {28:1--28:30},
 articleno = {28},
 numpages = {30},
 SKIPurl = {http://doi.acm.org/10.1145/3158116},
 doi = {10.1145/3158116},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Pirlea-Sergey:CPP18,
 author = {P\^{\i}rlea, George and Sergey, Ilya},
 title = {Mechanising Blockchain Consensus},
 booktitle = {Proceedings of the 7th ACM SIGPLAN International Conference on Certified Programs and Proofs},
 series = {CPP 2018},
 year = {2018},
 isbn = {978-1-4503-5586-5},
 location = {Los Angeles, CA, USA},
 pages = {78--90},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/3167086},
 doi = {10.1145/3167086},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Wilcox-al:SNAPL17,
  author =	{James R. Wilcox and Ilya Sergey and Zachary Tatlock},
  title =	{{Programming Language Abstractions for Modularly Verified Distributed Systems}},
  booktitle =	{2nd Summit on Advances in Programming Languages (SNAPL 2017)},
  pages =	{19:1--19:12},
  series =	{Leibniz International Proceedings in Informatics (LIPIcs)},
  ISBN =	{978-3-95977-032-3},
  ISSN =	{1868-8969},
  year =	{2017},
  volume =	{71},
  editor =	{Benjamin S. Lerner and Rastislav Bod{\'i}k and Shriram Krishnamurthi},
  publisher =	{Schloss Dagstuhl--Leibniz-Zentrum fuer Informatik},
  address =	{Dagstuhl, Germany},
  SKIPURL =		{http://drops.dagstuhl.de/opus/volltexte/2017/7126},
  SKIPURN =		{urn:nbn:de:0030-drops-71266},
  doi =		{10.4230/LIPIcs.SNAPL.2017.19},
}

@InProceedings{Braibant-Chlipala:CAV13,
author="Braibant, Thomas
and Chlipala, Adam",
SKIPeditor="Sharygina, Natasha
and Veith, Helmut",
title="Formal Verification of Hardware Synthesis",
booktitle="Computer Aided Verification",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="213--228",
isbn="978-3-642-39799-8",
doi="10.1007/978-3-642-39799-8_14",
}

@article{Ebner2017,
 author = {Ebner, Gabriel and Ullrich, Sebastian and Roesch, Jared and Avigad, Jeremy and de Moura, Leonardo},
 title = {A Metaprogramming Framework for Formal Verification},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {September 2017},
 volume = {1},
 number = {ICFP},
 month = aug,
 year = {2017},
 issn = {2475-1421},
 pages = {34:1--34:29},
 articleno = {34},
 numpages = {29},
 SKIPurl = {http://doi.acm.org/10.1145/3110278},
 doi = {10.1145/3110278},
 acmid = {3110278},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {dependent type theory, metaprogramming, tactic language, theorem proving},
} 

@inproceedings{Pfenning1988,
 author = {Pfenning, F. and Elliott, C.},
 title = {Higher-order Abstract Syntax},
 booktitle = {Proceedings of the ACM SIGPLAN 1988 Conference on Programming Language Design and Implementation},
 series = {PLDI '88},
 year = {1988},
 isbn = {0-89791-269-1},
 location = {Atlanta, Georgia, USA},
 pages = {199--208},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/53990.54010},
 doi = {10.1145/53990.54010},
 acmid = {54010},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@inproceedings{Ciaffaglione2012,
  author    = {Alberto Ciaffaglione and
               Ivan Scagnetto},
  title     = {A weak {HOAS} approach to the {POPLMark} Challenge},
  booktitle = {Proceedings Seventh Workshop on Logical and Semantic Frameworks, with
               Applications, {LSFA} 2012, Rio de Janeiro, Brazil, September 29-30,
               2012.},
  pages     = {109--124},
  year      = {2012},
  SKIPurl       = {https://doi.org/10.4204/EPTCS.113.11},
  doi       = {10.4204/EPTCS.113.11},
  timestamp = {Wed, 03 May 2017 14:47:55 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/corr/abs-1303-7332},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@Article{appel2012list,
author="Appel, Andrew W.
and Dockins, Robert
and Leroy, Xavier",
title="A List-Machine Benchmark for Mechanized Metatheory",
journal="Journal of Automated Reasoning",
year="2012",
month="Oct",
day="01",
volume="49",
number="3",
pages="453--491",
issn="1573-0670",
doi="10.1007/s10817-011-9226-1",
SKIPurl="https://doi.org/10.1007/s10817-011-9226-1"
}

@inproceedings{Jang2012,
 author = {Jang, Dongseok and Tatlock, Zachary and Lerner, Sorin},
 title = {Establishing Browser Security Guarantees Through Formal Shim Verification},
 booktitle = {Proceedings of the 21st USENIX Conference on Security Symposium},
 series = {Security'12},
 year = {2012},
 location = {Bellevue, WA},
 pages = {8--8},
 numpages = {1},
 SKIPurl = {http://dl.acm.org/citation.cfm?id=2362793.2362801},
 publisher = {USENIX Association},
 address = {Berkeley, CA, USA},
} 

@inproceedings{Greenaway2014,
 author = {Greenaway, David and Lim, Japheth and Andronick, June and Klein, Gerwin},
 title = {Don't Sweat the Small Stuff: Formal Verification of {C} Code Without the Pain},
 booktitle = {Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI '14},
 year = {2014},
 isbn = {978-1-4503-2784-8},
 location = {Edinburgh, United Kingdom},
 pages = {429--439},
 numpages = {11},
 SKIPurl = {http://doi.acm.org/10.1145/2594291.2594296},
 doi = {10.1145/2594291.2594296},
 acmid = {2594296},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {C verification, Isabelle/HOL},
} 

@article{Sergey2017,
 author = {Sergey, Ilya and Wilcox, James R. and Tatlock, Zachary},
 title = {Programming and Proving with Distributed Protocols},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {January 2018},
 volume = {2},
 number = {POPL},
 month = dec,
 year = {2017},
 issn = {2475-1421},
 pages = {28:1--28:30},
 articleno = {28},
 numpages = {30},
 SKIPurl = {http://doi.acm.org/10.1145/3158116},
 doi = {10.1145/3158116},
 acmid = {3158116},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {dependent types, distributed systems, program logics, safety verification},
}

@InCollection{sep-aristotle-logic,
  author       =	{Smith, Robin},
  title        =	{Aristotle's Logic},
  booktitle    =	{The Stanford Encyclopedia of Philosophy},
  editor       =	{Edward N. Zalta},
  url =	{https://plato.stanford.edu/archives/spr2018/entries/aristotle-logic/},
  year         =	{2018},
  edition      =	{Spring 2018},
  publisher    =	{Metaphysics Research Lab, Stanford University}
}

@inbook{AristotlePriorAnalytics,
  author = {{Aristotle}},
  title = {Prior Analytics},
  booktitle = {The Works of {Aristotle}},
  publisher = {Oxford},
  year = {1926},
  note = {Translated by A. J. Jenkinson},
}

@book{Frege1893,
  title = {Grundgesetze der Arithmetik},
  author = {Gottlob Frege},
  publisher = {Jena: Verlag Hermann Pohle},
  year = {1893},
}

@book{Leibniz1685,
  title = {The Art of Discovery},
  year = {1685},
  author = {Gottfried Wilhelm Leibniz},
  note = {Wiener 51},
}

@book{Russell1918,
  title = {Introduction to Mathematical Philosophy},
  author = {Bertrand Russell},
  year = {1919},
  publisher = {George Allen and Unwin},
  address = {London, UK},
}

@InCollection{sep-frege,
  author       =	{Zalta, Edward N.},
  title        =	{Gottlob Frege},
  booktitle    =	{The Stanford Encyclopedia of Philosophy},
  editor       =	{Edward N. Zalta},
  url =	{https://plato.stanford.edu/archives/spr2018/entries/frege/},
  year         =	{2018},
  edition      =	{Spring 2018},
  publisher    =	{Metaphysics Research Lab, Stanford University}
}

@InCollection{sep-frege-theorem,
	author       =	{Zalta, Edward N.},
	title        =	{Frege's Theorem and Foundations for Arithmetic},
	booktitle    =	{The Stanford Encyclopedia of Philosophy},
	editor       =	{Edward N. Zalta},
	url =	{https://plato.stanford.edu/archives/fall2018/entries/frege-theorem/},
	year         =	{2018},
	edition      =	{Fall 2018},
	publisher    =	{Metaphysics Research Lab, Stanford University}
}

@Book{Whitehead1997,
    author = {Alfred North {Whitehead} and Bertrand {Russell}},
    title = {{Principia mathematica to *56.}},
    year = {1997},
    publisher = {Cambridge University Press},
}

@InCollection{sep-principia-mathematica,
  author       =	{Irvine, Andrew David},
  title        =	{Principia Mathematica},
  booktitle    =	{The Stanford Encyclopedia of Philosophy},
  editor       =	{Edward N. Zalta},
  url =	{https://plato.stanford.edu/archives/win2016/entries/principia-mathematica/},
  year         =	{2016},
  edition      =	{Winter 2016},
  publisher    =	{Metaphysics Research Lab, Stanford University}
}

@Article{Goedel1931,
author="G{\"o}del, Kurt",
title="{\"U}ber formal unentscheidbare S{\"a}tze der Principia Mathematica und verwandter Systeme I",
journal="Monatshefte f{\"u}r Mathematik und Physik",
year="1931",
month="Dec",
day="01",
volume="38",
number="1",
pages="173--198",
issn="1436-5081",
doi="10.1007/BF01700692",
SKIPurl="https://doi.org/10.1007/BF01700692"
}

@book{Warden2009Book,
  title = {Masterminds of Programming: Conversations with the Creators of Major Programming Languages},
  author = {Shane Warden and Federico Biancuzzi},
  publisher = {O'Reilly Media},
  year = {2009},
}

@misc{VerifiedCryptoFirefox,
  title = {Verified cryptography for {Firefox} 57},
  key = {VerifiedCryptoFirefox},
  url = {https://blog.mozilla.org/security/2017/09/13/verified-cryptography-firefox-57},
}

@misc{LeroyDeepSpecSS17,
  title = {The formal verification of compilers},
  author = {Xavier Leroy},
  key = {LeroyDeepSpecSS17},
  year = {2017},
  url = {https://deepspec.org/event/dsss17/leroy-dsss17.pdf}
}

@misc{travisci,
  title = {{Travis CI}},
  key = {TravisCI},
  url = {https://travis-ci.org}
}

@misc{ProofEngineeringTips,
  title = {Proof engineering hints and heuristics},
  key = {ProofEngineeringTips},
  url = {https://github.com/uwplse/verdi/blob/master/PROOF_ENGINEERING.md}
}

@misc{VerdiRaftSnapshotBug,
  title = {Crash during update of snapshot causes loss of data},
  key = {VerdiRaftSnapshotBug},
  url = {https://github.com/uwplse/verdi-raft/issues/51},
}

@misc{QuickChick,
  title = {{QuickChick}: Randomized Property-Based Testing Plugin for {Coq}},
  key = {QuickChick},
  url = {https://github.com/QuickChick/QuickChick}
}

@misc{PUMPKIN,
  title = {{Proof Updater Mechanically Passing Knowledge Into New Proofs, Assisting The Coq Hacker}},
  key = {PUMPKIN},
  url = {https://github.com/uwplse/PUMPKIN-PATCH}
}

@misc{iCoqWebPage,
  title = {{iCoq} Home Page},
  key = {iCoqWebPage},
  url = {http://cozy.ece.utexas.edu/icoq},
}

@misc{VerdiRaftLivenessBug,
  title = {Node in singleton cluster never becomes leader},
  key = {VerdiRaftLivenessBug},
  url = {https://github.com/uwplse/verdi-raft/issues/40},
}

@misc{ChlipalaInterview,
  title = {Interview with Professor {Adam Chlipala} at {MIT}},
  key = {ChlipalaInterview},
  url = {https://www.functionalgeekery.com/episode-101-adam-chlipala},
}

@misc{UniMath,
  author = {Voevodsky, Vladimir and Ahrens, Benedikt and Grayson, Daniel and others},
  title = {{\em UniMath}: {Univalent} {Mathematics}},
  url = {https://github.com/UniMath},
  year={2011-2019}
}

@misc{FSCQBug,
  title = {Truncate extension sometimes extends with file names instead of zeros},
  key = {FSCQBug},
  url = {https://github.com/mit-pdos/fscq/issues/2}
}

@misc{CoqAsync,
  title = {Coq Asynchronous and Parallel Proof Processing},
  key = {CoqAsync},
  url = {https://coq.inria.fr/refman/async-proofs.html},
}

@misc{AspinallProofEng,
  title = {Proof Engineering},
  author = {David Aspinall},
  url = {http://homepages.inf.ed.ac.uk/da/proofeng.shtml}
}
  
@misc{KleinWantProofEng,
  title = {So you want to be a proof engineer?},
  author = {Gerwin Klein},
  year = {2015},
  url = {https://proofcraft.org/blog/proof-engineer-reading.html}
}

@book{ConcSemBook,
  title = {Concrete Semantics With {Isabelle/HOL}},
  author = {Tobias Nipkow and Gerwin Klein},
  doi = {10.1007/978-3-319-10542-0},
  year = {2014},
  publisher = {Springer},
}

@misc{MathCompBook,
  title = {Mathematical Components},
  author = {Assia Mahboubi and Enrico Tassi},
  url = {https://github.com/math-comp/mcb},
  year = {2017},
}

@misc{FRAPBook,
  title = {Formal Reasoning About Programs},
  author = {Adam Chlipala},
  url = {http://adam.chlipala.net/frap/},
  year = {2017},
}

@misc{ChlipalaMITReview,
  title = {Guaranteed Code},
  author = {Larry Hardesty},
  year = {2017},
  month = {October},
  url = {https://www.technologyreview.com/s/608995/guaranteed-code/},
}

@misc{LeroyPOPL18Interview,
  title = {Interview with {Xavier Leroy}},
  author = {Jean Yang},
  year = {2017},
  url = {https://www.cs.cmu.edu/~popl-interviews/leroy.html},
}



@misc{WenzelScalingIsabelle,
  title = {Scaling {Isabelle} Proof Document Processing},
  author = {Makarius Wenzel},
  year = {2017},
  month = {December},
  url = {http://sketis.net/wp-content/uploads/2017/12/Isabelle_Scaling_Dec-2017.pdf}
}

@misc{WenzelFurtherScalingIsabelle,
 title = {Further Scaling of Isabelle Technology},
 author = {Makarius Wenzel},
 year = {2018},
 month = {April},
 url={https://files.sketis.net/Isabelle_Workshop_2018/Isabelle_2018_paper_1.pdf},
}

@misc{WenzelIsabelleFuture,
  title = {Future Prospects of Isabelle Technology},
  author = {Makarius Wenzel},
  year = {2017},
  month = {November},
  url = {http://sketis.net/wp-content/uploads/2017/11/Copenhagen2017.pdf}
}

@book{Gries1981,
  title = {The Science of Programming},
  author = {David Gries},
  doi = {10.1007/978-1-4612-5983-1},
  publisher = {Springer},
  year = 1981,
}

@inproceedings{abel2017poplmark,
  title={POPLMark Reloaded},
  author={Abel, Andreas and Momigliano, Alberto and Pientka, Brigitte},
  booktitle={Proceedings of the Logical Frameworks and Meta-Languages: Theory and Practice Workshop},
  year={2017}
}

@article{Tarski1936,
  pages = {261--405},
  volume = {1},
  title = {Der Wahrheitsbegriff in den Formalisierten Sprachen},
  author = {Alfred Tarski},
  year = {1936},
  journal = {Studia Philosophica}
}

@article{vonNeumann1993,
 author = {von Neumann, John},
 title = {First Draft of a Report on the {EDVAC}},
 journal = {IEEE Ann. Hist. Comput.},
 issue_date = {October 1993},
 volume = {15},
 number = {4},
 month = oct,
 year = {1993},
 issn = {1058-6180},
 pages = {27--75},
 numpages = {49},
 SKIPurl = {http://dx.doi.org/10.1109/85.238389},
 doi = {10.1109/85.238389},
 acmid = {612553},
 publisher = {IEEE Educational Activities Department},
 address = {Piscataway, NJ, USA},
}

@inproceedings{Harper1987,
    author =    {Robert Harper and Furio Honsell and Gordon D. Plotkin},
    title =     {A Framework for Defining Logics},
    booktitle =  {Proceedings of the Second Annual IEEE Symposium on Logic in Computer Science (LICS 1987)},
    year =      {1987},
    month =     {June}, 
    pages =      {194--204},
    location =   {Ithaca, NY, USA}, 
    publisher =         {IEEE Computer Society Press}
}

@article{Harper1993,
 author = {Harper, Robert and Honsell, Furio and Plotkin, Gordon},
 title = {A Framework for Defining Logics},
 journal = {J. ACM},
 issue_date = {Jan. 1993},
 volume = {40},
 number = {1},
 month = jan,
 year = {1993},
 issn = {0004-5411},
 pages = {143--184},
 numpages = {42},
 SKIPurl = {http://doi.acm.org/10.1145/138027.138060},
 doi = {10.1145/138027.138060},
 acmid = {138060},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Rompf2016,
 author = {Rompf, Tiark and Amin, Nada},
 title = {Type Soundness for Dependent Object Types},
 booktitle = {Proceedings of the 2016 ACM SIGPLAN International Conference on Object-Oriented Programming, Systems, Languages, and Applications},
 series = {OOPSLA 2016},
 year = {2016},
 isbn = {978-1-4503-4444-9},
 location = {Amsterdam, Netherlands},
 pages = {624--641},
 numpages = {18},
 SKIPurl = {http://doi.acm.org/10.1145/2983990.2984008},
 doi = {10.1145/2983990.2984008},
 acmid = {2984008},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {DOT, Scala, dependent object types, soundness},
} 

@phdthesis{Garillot:PhD,
   title = {Generic Proof Tools and Finite Group Theory},
   author = {Fran\c{c}ois Garillot},
   school = {\'{E}cole Polytechnique},
   address = {Palaiseau, France},
   year = {2011}
}

@phdthesis{Saibi:PhD,
   title = {Outils G\'{e}n\'{e}riques de Mod\'{e}lisation et de
                  D\'{e}monstration pour la Formalisation des
                  Math\'{e}matiques en Th\'{e}orie des Types:
                  application \`{a} la Th\'{e}orie des Cat\'{e}gories},
   author = {Amokrane Saibi},
   school = {Universit\'{e} Paris VI},
   address = {Paris, France},
   year = {1999}
}

@InProceedings{Mahboubi-Tassi:ITP13,
author="Mahboubi, Assia
and Tassi, Enrico",
editor="Blazy, Sandrine
and Paulin-Mohring, Christine
and Pichardie, David",
title="Canonical Structures for the Working {Coq} User",
booktitle="Interactive Theorem Proving",
year="2013",
publisher="Springer Berlin Heidelberg",
address="Berlin, Heidelberg",
pages="19--34",
isbn="978-3-642-39634-2",
doi="10.1007/978-3-642-39634-2_5",
}

@InProceedings{Filliatre2004,
author="Filli{\^a}tre, Jean-Christophe
and Letouzey, Pierre",
SKIPeditor="Schmidt, David",
title="Functors for Proofs and Programs",
booktitle="Programming Languages and Systems",
year="2004",
publisher="Springer",
address="Berlin, Heidelberg",
pages="370--384",
isbn="978-3-540-24725-8",
doi="10.1007/978-3-540-24725-8_26",
}

@InProceedings{Aspinall2016,
author="Aspinall, David
and Kaliszyk, Cezary",
SKIPeditor="Stevens, Perdita
and W{\k{a}}sowski, Andrzej",
title="Towards Formal Proof Metrics",
booktitle="Fundamental Approaches to Software Engineering",
year="2016",
publisher="Springer",
address="Berlin, Heidelberg",
pages="325--341",
isbn="978-3-662-49665-7",
doi="10.1007/978-3-662-49665-7_19",
}

@InProceedings{Kaliszyk2017,
  author    = {Cezary Kaliszyk and
               Fran{\c{c}}ois Chollet and
               Christian Szegedy},
  title     = {{HolStep}: {A} Machine Learning Dataset for Higher-order Logic Theorem
               Proving},
  year      = {2017},
  booktitle = {ICLR},
  url = {https://openreview.net/forum?id=ryuxYmvel},
}

@InProceedings{Muller2017,
author="M{\"u}ller, Dennis
and Gauthier, Thibault
and Kaliszyk, Cezary
and Kohlhase, Michael
and Rabe, Florian",
SKIPeditor="Geuvers, Herman
and England, Matthew
and Hasan, Osman
and Rabe, Florian
and Teschke, Olaf",
title="Classification of Alignments Between Concepts of Formal Mathematical Systems",
booktitle="Intelligent Computer Mathematics",
year="2017",
publisher="Springer International Publishing",
address="Cham",
pages="83--98",
isbn="978-3-319-62075-6",
doi="10.1007/978-3-319-62075-6_7",
}

@InProceedings{Aspinall2016b,
author="Aspinall, David
and Kaliszyk, Cezary",
SKIPeditor="Blanchette, Jasmin Christian
and Merz, Stephan",
title="What's in a Theorem Name?",
booktitle="Interactive Theorem Proving",
year="2016",
publisher="Springer International Publishing",
address="Cham",
pages="459--465",
isbn="978-3-319-43144-4",
doi="10.1007/978-3-319-43144-4_28",
}

@inproceedings{Gauthier2016,
  author    = {Thibault Gauthier and
               Cezary Kaliszyk and
               Josef Urban},
  title     = {Initial Experiments with Statistical Conjecturing over Large Formal
               Corpora},
  pages     = {219--228},
  year      = {2016},
  SKIPeditor    = {Andrea Kohlhase and
               Paul Libbrecht and
               Bruce R. Miller and
               Adam Naumowicz and
               Walther Neuper and
               Pedro Quaresma and
               Frank Wm. Tompa and
               Martin Suda},
  booktitle     = {Joint Proceedings of the FM4M, MathUI, and ThEdu Workshops, Doctoral
               Program, and Work in Progress at the Conference on Intelligent Computer
               Mathematics 2016 (CICM-WiP 2016)},
  series    = {{CEUR}},
  volume    = {1785},
  publisher = {CEUR-WS.org},
}

@incollection{Wang2017,
title = {Premise Selection for Theorem Proving by Deep Graph Embedding},
author = {Wang, Mingzhe and Tang, Yihe and Wang, Jian and Deng, Jia},
booktitle = {Advances in Neural Information Processing Systems 30},
SKIPeditor = {I. Guyon and U. V. Luxburg and S. Bengio and H. Wallach and R. Fergus and S. Vishwanathan and R. Garnett},
pages = {2786--2796},
year = {2017},
publisher = {Curran Associates, Inc.},
url = {http://papers.nips.cc/paper/6871-premise-selection-for-theorem-proving-by-deep-graph-embedding.pdf}
}

@inproceedings{Corneli2017,
 author = {Corneli, Joseph and Martin, Ursula and Murray-Rust, Dave and Pease, Alison and Puzio, Raymond and Rino Nesin, Gabriela},
 title = {Modelling the Way Mathematics is Actually Done},
 booktitle = {Proceedings of the 5th ACM SIGPLAN International Workshop on Functional Art, Music, Modeling, and Design},
 series = {FARM 2017},
 year = {2017},
 isbn = {978-1-4503-5180-5},
 location = {Oxford, UK},
 pages = {10--19},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/3122938.3122942},
 doi = {10.1145/3122938.3122942},
 acmid = {3122942},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Peng2017,
author="Peng, Kebin
and Ma, Dianfu",
SKIPeditor="Liu, Derong
and Xie, Shengli
and Li, Yuanqing
and Zhao, Dongbin
and El-Alfy, El-Sayed M.",
title="Tree-Structure {CNN} for Automated Theorem Proving",
booktitle="Neural Information Processing",
year="2017",
publisher="Springer International Publishing",
address="Cham",
pages="3--12",
isbn="978-3-319-70096-0",
doi = "10.1007/978-3-319-70096-0_1"
}

@incollection{Irving2016,
title = {{DeepMath} - Deep Sequence Models for Premise Selection},
author = {Irving, Geoffrey and Szegedy, Christian and Alemi, Alexander A and Een, Niklas and Chollet, Francois and Urban, Josef},
booktitle = {Advances in Neural Information Processing Systems 29},
SKIPeditor = {D. D. Lee and M. Sugiyama and U. V. Luxburg and I. Guyon and R. Garnett},
pages = {2235--2243},
year = {2016},
publisher = {Curran Associates, Inc.},
url = {http://papers.nips.cc/paper/6280-deepmath-deep-sequence-models-for-premise-selection.pdf}
}

@inproceedings{Loos2017,
  author    = {Sarah Loos and Geoffrey Irving and Christian Szegedy and Cezary Kaliszyk},
  title     = {Deep Network Guided Proof Search},
  booktitle = {LPAR-21. 21st International Conference on Logic for Programming, Artificial Intelligence and Reasoning},
  SKIPeditor    = {Thomas Eiter and David Sands},
  series    = {EPiC Series in Computing},
  volume    = {46},
  pages     = {85--105},
  year      = {2017},
  publisher = {EasyChair},
  bibsource = {EasyChair, https://easychair.org},
  issn      = {2398-7340},
  SKIPurl       = {https://easychair.org/publications/paper/ND13},
  doi       = {10.29007/8mwc}
}

@inproceedings{Gauthier2017b,
  author    = {Thibault Gauthier and Cezary Kaliszyk and Josef Urban},
  title     = {{TacticToe}: Learning to Reason with {HOL4} Tactics},
  booktitle = {LPAR-21. 21st International Conference on Logic for Programming, Artificial Intelligence and Reasoning},
  SKIPeditor    = {Thomas Eiter and David Sands},
  series    = {EPiC Series in Computing},
  volume    = {46},
  pages     = {125--143},
  year      = {2017},
  publisher = {EasyChair},
  bibsource = {EasyChair, https://easychair.org},
  issn      = {2398-7340},
  SKIPurl       = {https://easychair.org/publications/paper/WsM},
  doi       = {10.29007/ntlb}
}

@Article{Blanchette2016b,
author="Blanchette, Jasmin Christian
and Greenaway, David
and Kaliszyk, Cezary
and K{\"u}hlwein, Daniel
and Urban, Josef",
title="A Learning-Based Fact Selector for {Isabelle/HOL}",
journal="Journal of Automated Reasoning",
year="2016",
month="Oct",
day="01",
volume="57",
number="3",
pages="219--244",
issn="1573-0670",
doi="10.1007/s10817-016-9362-8",
SKIPurl="https://doi.org/10.1007/s10817-016-9362-8"
}

@InProceedings{Gransden2015,
author="Gransden, Thomas
and Walkinshaw, Neil
and Raman, Rajeev",
SKIPeditor="Felty, Amy P.
and Middeldorp, Aart",
title="{SEPIA}: Search for Proofs Using Inferred Automata",
booktitle="Automated Deduction - CADE-25",
year="2015",
publisher="Springer International Publishing",
address="Cham",
pages="246--255",
doi="10.1007/978-3-319-21401-6_16",
isbn="978-3-319-21401-6"
}

@inproceedings{Stewart2015,
 author = {Stewart, Gordon and Beringer, Lennart and Cuellar, Santiago and Appel, Andrew W.},
 title = {Compositional {CompCert}},
 booktitle = {POPL},
 year = {2015},
 isbn = {978-1-4503-3300-9},
 location = {Mumbai, India},
 pages = {275--287},
 SKIPurl = {http://doi.acm.org/10.1145/2676726.2676985},
 doi = {10.1145/2676726.2676985},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@inproceedings{Kell2016,
 author = {Kell, Stephen and Mulligan, Dominic P. and Sewell, Peter},
 title = {The Missing Link: Explaining {ELF} Static Linking, Semantically},
 booktitle = {OOPSLA},
 year = {2016},
 isbn = {978-1-4503-4444-9},
 location = {Amsterdam, Netherlands},
 pages = {607--623},
 SKIPurl = {http://doi.acm.org/10.1145/2983990.2983996},
 doi = {10.1145/2983990.2983996},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Misc{Appel2011b,
  author = {Andrew W. Appel},
  title = {Efficient Verified Red-Black Trees},
  year = {2011},
  url = {https://www.cs.princeton.edu/~appel/papers/redblack.pdf}
}

@Article{Cao2018,
author="Cao, Qinxiang
and Beringer, Lennart
and Gruetter, Samuel
and Dodds, Josiah
and Appel, Andrew W.",
title="{VST-Floyd}: A Separation Logic Tool to Verify Correctness of {C} Programs",
journal="Journal of Automated Reasoning",
year="2018",
month=jun,
day="01",
volume="61",
number="1",
pages="367--422",
issn="1573-0670",
doi="10.1007/s10817-018-9457-5",
SKIPurl="https://doi.org/10.1007/s10817-018-9457-5"
}

@Article{Doczkal2018,
author="Doczkal, Christian
and Smolka, Gert",
title="Regular Language Representations in the Constructive Type Theory of {Coq}",
journal="Journal of Automated Reasoning",
year="2018",
month=jun,
day="01",
volume="61",
number="1",
pages="521--553",
issn="1573-0670",
doi="10.1007/s10817-018-9460-x",
SKIPurl="https://doi.org/10.1007/s10817-018-9460-x"
}

@Article{Kuncar2018,
author="Kun{\v{c}}ar, Ond{\v{r}}ej
and Popescu, Andrei",
title="A Consistent Foundation for {Isabelle/HOL}",
journal="Journal of Automated Reasoning",
year="2018",
month="Jan",
day="27",
issn="1573-0670",
doi="10.1007/s10817-018-9454-8",
SKIPurl="https://doi.org/10.1007/s10817-018-9454-8"
}

@InProceedings{Anand2014,
author="Anand, Abhishek
and Rahli, Vincent",
SKIPeditor="Klein, Gerwin
and Gamboa, Ruben",
title="Towards a Formally Verified Proof Assistant",
booktitle="Interactive Theorem Proving",
year="2014",
publisher="Springer International Publishing",
address="Cham",
pages="27--44",
isbn="978-3-319-08970-6",
doi="10.1007/978-3-319-08970-6_3",
}

@InProceedings{Kumar2018,
author="Kumar, Ramana
and Mullen, Eric
and Tatlock, Zachary
and Myreen, Magnus O.",
SKIPeditor="Avigad, Jeremy
and Mahboubi, Assia",
title="Software Verification with {ITPs} Should Use Binary Code Extraction to Reduce the {TCB}",
booktitle={ITP},
doi="10.1007/978-3-319-94821-8_21",
year="2018",
publisher="Springer International Publishing",
address="Cham",
pages="362--369",
isbn="978-3-319-94821-8"
}

@InProceedings{Letouzey2003,
author="Letouzey, Pierre",
SKIPeditor="Geuvers, Herman
and Wiedijk, Freek",
title="A New Extraction for {Coq}",
booktitle="Types for Proofs and Programs",
year="2003",
publisher="Springer",
address="Berlin, Heidelberg",
doi="10.1007/3-540-39185-1_12",
pages="200--219",
isbn="978-3-540-39185-2"
}

@inproceedings{Mullen2018,
 author = {Mullen, Eric and Pernsteiner, Stuart and Wilcox, James R. and Tatlock, Zachary and Grossman, Dan},
 title = {{Oeuf}: Minimizing the {Coq} Extraction {TCB}},
 booktitle = {CPP},
 year = {2018},
 isbn = {978-1-4503-5586-5},
 location = {Los Angeles, CA, USA},
 pages = {172--185},
 SKIPurl = {http://doi.acm.org/10.1145/3167089},
 doi = {10.1145/3167089},
 publisher = {ACM},
 address = {New York, NY, USA}, 
}

@inproceedings{Palmskog2018,
 author = {Palmskog, Karl and Celik, Ahmet and Gligoric, Milos},
 title = {{piCoq}: Parallel Regression Proving for Large-scale Verification Projects},
 booktitle = {ISSTA},
 year = {2018},
 isbn = {978-1-4503-5699-2},
 location = {Amsterdam, Netherlands},
 pages = {344--355},
 SKIPurl = {http://doi.acm.org/10.1145/3213846.3213877},
 doi = {10.1145/3213846.3213877},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{MacQueen1986,
 author = {MacQueen, David B.},
 title = {Using Dependent Types to Express Modular Structure},
 booktitle = {Proceedings of the 13th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages},
 series = {POPL '86},
 year = {1986},
 location = {St. Petersburg Beach, Florida},
 pages = {277--286},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/512644.512670},
 doi = {10.1145/512644.512670},
 acmid = {512670},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Chrzaszcz2003,
author="Chrz{\k{a}}szcz, Jacek",
SKIPeditor="Basin, David
and Wolff, Burkhart",
title="Implementing Modules in the {Coq} System",
booktitle="Theorem Proving in Higher Order Logics",
year="2003",
publisher="Springer",
address="Berlin, Heidelberg",
pages="270--286",
isbn="978-3-540-45130-3",
doi="10.1007/10930755_18"
}

@inproceedings{Nagashima2018,
 author = {Nagashima, Yutaka and He, Yilun},
 title = {{PaMpeR}: Proof Method Recommendation System for {Isabelle/HOL}},
 booktitle = {Proceedings of the International Conference on Automated Software Engineering},
 series = {ASE 2018},
 year = {2018},
 isbn = {978-1-4503-5937-5},
 location = {Montpellier, France},
 pages = {362--372},
 numpages = {11},
 SKIPurl = {http://doi.acm.org/10.1145/3238147.3238210},
 doi = {10.1145/3238147.3238210},
 acmid = {3238210},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@InProceedings{Ballarin2006,
author="Ballarin, Clemens",
SKIPeditor="Borwein, Jonathan M.
and Farmer, William M.",
title="Interpretation of Locales in {Isabelle}: Theories and Proof Contexts",
booktitle="Mathematical Knowledge Management",
year="2006",
publisher="Springer",
address="Berlin, Heidelberg",
pages="31--43",
isbn="978-3-540-37106-9",
doi="10.1007/11812289_4",
}

@InProceedings{Haftmann2009,
author="Haftmann, Florian
and Wenzel, Makarius",
SKIPeditor="Berardi, Stefano
and Damiani, Ferruccio
and de'Liguoro, Ugo",
title="Local Theory Specifications in {Isabelle/Isar}",
booktitle="Types for Proofs and Programs",
year="2009",
publisher="Springer",
address="Berlin, Heidelberg",
pages="153--168",
isbn="978-3-642-02444-3",
doi="10.1007/978-3-642-02444-3_10",
}

@InProceedings{Kammueller1999,
author="Kamm{\"u}ller, Florian
and Wenzel, Markus
and Paulson, Lawrence C.",
SKIPeditor="Bertot, Yves
and Dowek, Gilles
and Th{\'e}ry, Laurent
and Hirschowitz, Andr{\'e}
and Paulin, Christine",
title="Locales A Sectioning Concept for {Isabelle}",
booktitle="Theorem Proving in Higher Order Logics",
year="1999",
publisher="Springer",
address="Berlin, Heidelberg",
pages="149--165",
isbn="978-3-540-48256-7",
doi="10.1007/3-540-48256-3_11",
}

@InProceedings{PaulinMohring1993,
author="Paulin-Mohring, Christine",
SKIPeditor="Bezem, Marc
and Groote, Jan Friso",
title="Inductive definitions in the system {Coq} rules and properties",
booktitle="Typed Lambda Calculi and Applications",
year="1993",
publisher="Springer",
address="Berlin, Heidelberg",
pages="328--345",
isbn="978-3-540-47586-6",
doi="10.1007/BFb0037116"
}

@InProceedings{Anand2018,
author="Anand, Abhishek
and Boulier, Simon
and Cohen, Cyril
and Sozeau, Matthieu
and Tabareau, Nicolas",
SKIPeditor="Avigad, Jeremy
and Mahboubi, Assia",
title="Towards Certified Meta-Programming with Typed {Template-Coq}",
booktitle="Interactive Theorem Proving",
year="2018",
publisher="Springer International Publishing",
address="Cham",
pages="20--39",
isbn="978-3-319-94821-8",
doi="10.1007/978-3-319-94821-8_2"
}

@misc{ChlipalaEndToEnd,
  title={The Surprising Security Benefits of End-to-End Formal Proofs},
  author={Chlipala, Adam},
  year={2018},
  url = {http://www.cccblog.org/2018/06/13/the-surprising-security-benefits-of-end-to-end-formal-proofs/}
}

@article{Wenzel2007isar,
  title={{Isabelle/Isar}--a generic framework for human-readable proof documents},
  author={Wenzel, Makarius},
  journal={From Insight to Proof--Festschrift in Honour of Andrzej Trybulec},
  volume={10},
  number={23},
  pages={277--298},
  year={2007}
}

@misc{PedrotTacticEngine,
  title={Ticking Like a Clockwork: The New {Coq} Tactics},
  author={Pedrot, Pierre-Marie},
  year=2016,
  url = {http://coqhott.gforge.inria.fr/blog/coq-tactic-engine/},
}

@misc{coq-hott,
  title={The CoqHoTT Project},
  author={{CoqHoTT Development Team}},
  year={2015-2019},
  url={http://coqhott.gforge.inria.fr/},
  accessed={February 6th, 2019}
}

@misc{SpiwackTactic,
 title = {Inside the design of a tactic system},
 author = {Spiwack, Arnaud},
 year=2016,
 url={https://github.com/aspiwack/tacengine/releases/download/v0.1-draft/tacengine.pdf}
}

@article{Kaiser2018,
 author = {Kaiser, Jan-Oliver and Ziliani, Beta and Krebbers, Robbert and R{\'e}gis-Gianas, Yann and Dreyer, Derek},
 title = {{Mtac2}: Typed Tactics for Backward Reasoning in {Coq}},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {September 2018},
 volume = {2},
 number = {ICFP},
 month = jul,
 year = {2018},
 issn = {2475-1421},
 pages = {78:1--78:31},
 articleno = {78},
 numpages = {31},
 SKIPurl = {http://doi.acm.org/10.1145/3236773},
 doi = {10.1145/3236773},
 acmid = {3236773},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@inproceedings{Cruanes2016,
  author    = {Simon Cruanes and Jasmin Christian Blanchette},
  title     = {Extending {Nunchaku} to Dependent Type Theory},
  booktitle = {HaTT@IJCAR},
  series    = {{EPTCS}},
  volume    = {210},
  pages     = {3--12},
  year      = {2016},
  doi = {10.4204/EPTCS.210.3},
}

@article{Krebbers2018,
 author = {Krebbers, Robbert and Jourdan, Jacques-Henri and Jung, Ralf and Tassarotti, Joseph and Kaiser, Jan-Oliver and Timany, Amin and Chargu{\'e}raud, Arthur and Dreyer, Derek},
 title = {{MoSeL}: A General, Extensible Modal Framework for Interactive Proofs in Separation Logic},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {September 2018},
 volume = {2},
 number = {ICFP},
 month = jul,
 year = {2018},
 issn = {2475-1421},
 pages = {77:1--77:30},
 articleno = {77},
 numpages = {30},
 SKIPurl = {http://doi.acm.org/10.1145/3236772},
 doi = {10.1145/3236772},
 acmid = {3236772},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@article{Breitner2018,
 author = {Breitner, Joachim and Spector-Zabusky, Antal and Li, Yao and Rizkallah, Christine and Wiegley, John and Weirich, Stephanie},
 title = {Ready, Set, Verify! Applying hs-to-coq to Real-world {Haskell} Code (Experience Report)},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {September 2018},
 volume = {2},
 number = {ICFP},
 month = jul,
 year = {2018},
 issn = {2475-1421},
 pages = {89:1--89:16},
 articleno = {89},
 numpages = {16},
 SKIPurl = {http://doi.acm.org/10.1145/3236784},
 doi = {10.1145/3236784},
 acmid = {3236784},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Wenzel2006,
author="Wenzel, Makarius",
SKIPeditor="Borwein, Jonathan M.
and Farmer, William M.",
title="Structured Induction Proofs in {Isabelle/Isar}",
booktitle="Mathematical Knowledge Management",
year="2006",
publisher="Springer",
address="Berlin, Heidelberg",
pages="17--30",
isbn="978-3-540-37106-9",
doi="10.1007/11812289_3",
}

@inproceedings{Saibi1997,
 author = {Saibi, Amokrane},
 title = {Typing Algorithm in Type Theory with Inheritance},
 booktitle = {Proceedings of the 24th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '97},
 year = {1997},
 isbn = {0-89791-853-3},
 location = {Paris, France},
 pages = {292--301},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/263699.263742},
 doi = {10.1145/263699.263742},
 acmid = {263742},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Hur2013,
 author = {Hur, Chung-Kil and Neis, Georg and Dreyer, Derek and Vafeiadis, Viktor},
 title = {The Power of Parameterization in Coinductive Proof},
 booktitle = {Proceedings of the 40th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '13},
 year = {2013},
 isbn = {978-1-4503-1832-7},
 location = {Rome, Italy},
 pages = {193--206},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/2429069.2429093},
 doi = {10.1145/2429069.2429093},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Gimenez1995,
author="Gim{\'e}nez, Eduardo",
SKIPeditor="Dybjer, Peter
and Nordstr{\"o}m, Bengt
and Smith, Jan",
title="Codifying guarded definitions with recursive schemes",
booktitle="Types for Proofs and Programs",
year="1995",
publisher="Springer",
address="Berlin, Heidelberg",
pages="39--59",
isbn="978-3-540-47770-9",
doi="10.1007/3-540-60579-7_3",
}

@InProceedings{Gimenez1996,
author="Gim{\'e}nez, Eduardo",
SKIPeditor="Berardi, Stefano
and Coppo, Mario",
title="An application of co-inductive types in {Coq}: Verification of the alternating bit protocol",
booktitle="Types for Proofs and Programs",
year="1996",
publisher="Springer",
address="Berlin, Heidelberg",
pages="135--152",
isbn="978-3-540-70722-6",
doi="10.1007/3-540-61780-9_67"
}

@InProceedings{Coquand1994,
author="Coquand, Thierry",
SKIPeditor="Barendregt, Henk
and Nipkow, Tobias",
title="Infinite objects in type theory",
booktitle="Types for Proofs and Programs",
year="1994",
publisher="Springer",
address="Berlin, Heidelberg",
pages="62--78",
isbn="978-3-540-48440-0",
doi="10.1007/3-540-58085-9_72"
}

@article{Coquand1988,
title = "The calculus of constructions",
journal = "Information and Computation",
volume = "76",
number = "2",
pages = "95--120",
year = "1988",
issn = "0890-5401",
doi = "10.1016/0890-5401(88)90005-3",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/0890540188900053",
author = "Thierry Coquand and G{\'e}rard Huet"
}

@inproceedings{Blanchette2015b,
 author = {Blanchette, Jasmin Christian and Popescu, Andrei and Traytel, Dmitriy},
 title = {Foundational Extensible Corecursion: A Proof Assistant Perspective},
 booktitle = {Proceedings of the 20th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP 2015},
 year = {2015},
 isbn = {978-1-4503-3669-7},
 location = {Vancouver, BC, Canada},
 pages = {192--204},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/2784731.2784732},
 doi = {10.1145/2784731.2784732},
 acmid = {2784732},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Paulson1997,
    author = {Paulson, Lawrence C.},
    title = "{Mechanizing Coinduction and Corecursion in Higher-order Logic}",
    journal = {Journal of Logic and Computation},
    volume = {7},
    number = {2},
    pages = {175-204},
    year = {1997},
    month = {04},
    issn = {0955-792X},
    doi = {10.1093/logcom/7.2.175},
    SKIPurl = {https://doi.org/10.1093/logcom/7.2.175},
    SKIPeprint = {http://oup.prod.sis.lan/logcom/article-pdf/7/2/175/2789033/7-2-175.pdf},
}

@InProceedings{Blanchette2017,
author="Blanchette, Jasmin Christian
and Bouzy, Aymeric
and Lochbihler, Andreas
and Popescu, Andrei
and Traytel, Dmitriy",
SKIPeditor="Yang, Hongseok",
title="Friends with Benefits: Implementing Corecursion in Foundational Proof Assistants",
booktitle="Programming Languages and Systems",
year="2017",
publisher="Springer",
address="Berlin, Heidelberg",
pages="111--140",
isbn="978-3-662-54434-1",
doi="10.1007/978-3-662-54434-1_5"
}

@article{Bertot2008b,
title = "Inductive and Coinductive Components of Corecursive Functions in {Coq}",
journal = "Electronic Notes in Theoretical Computer Science",
volume = "203",
number = "5",
pages = "25--47",
year = "2008",
note = "Proceedings of the Ninth Workshop on Coalgebraic Methods in Computer Science (CMCS 2008)",
issn = "1571-0661",
doi = "10.1016/j.entcs.2008.05.018",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S1571066108003320",
author = "Yves Bertot and Ekaterina Komendantskaya",
}

@article{Kuncar2017,
 author = {Kun\v{c}ar, Ond\v{r}ej and Popescu, Andrei},
 title = {Safety and Conservativity of Definitions in {HOL} and {Isabelle/HOL}},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {January 2018},
 volume = {2},
 number = {POPL},
 month = dec,
 year = {2017},
 issn = {2475-1421},
 pages = {24:1--24:26},
 articleno = {24},
 numpages = {26},
 SKIPurl = {http://doi.acm.org/10.1145/3158112},
 doi = {10.1145/3158112},
 acmid = {3158112},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@InProceedings{Kuncar2017b,
author="Kun{\v{c}}ar, Ond{\v{r}}ej
and Popescu, Andrei",
SKIPeditor="Yang, Hongseok",
title="Comprehending {Isabelle/HOL's} Consistency",
booktitle="Programming Languages and Systems",
year="2017",
publisher="Springer",
address="Berlin, Heidelberg",
pages="724--749",
doi="10.1007/978-3-662-54434-1_27",
isbn="978-3-662-54434-1"
}

@InProceedings{Blanchette2013b,
author="Blanchette, Jasmin Christian
and B{\"o}hme, Sascha
and Popescu, Andrei
and Smallbone, Nicholas",
SKIPeditor="Piterman, Nir
and Smolka, Scott A.",
title="Encoding Monomorphic and Polymorphic Types",
booktitle="Tools and Algorithms for the Construction and Analysis of Systems",
doi="10.1007/978-3-642-36742-7_34",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="493--507",
isbn="978-3-642-36742-7"
}

@Article{Ballarin2014,
author="Ballarin, Clemens",
title="Locales: A Module System for Mathematical Theories",
journal="Journal of Automated Reasoning",
year="2014",
month="Feb",
day="01",
volume="52",
number="2",
pages="123--153",
issn="1573-0670",
doi="10.1007/s10817-013-9284-7",
SKIPurl="https://doi.org/10.1007/s10817-013-9284-7"
}

@InProceedings{Blanchette2013c,
author="Blanchette, Jasmin Christian
and Popescu, Andrei",
SKIPeditor="Fontaine, Pascal
and Ringeissen, Christophe
and Schmidt, Renate A.",
title="Mechanizing the Metatheory of {Sledgehammer}",
booktitle="Frontiers of Combining Systems",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="245--260",
doi="10.1007/978-3-642-40885-4_17",
isbn="978-3-642-40885-4"
}

@InProceedings{Pfenning1990,
author="Pfenning, Frank
and Paulin-Mohring, Christine",
SKIPeditor="Main, M.
and Melton, A.
and Mislove, M.
and Schmidt, D.",
title="Inductively defined types in the {Calculus of Constructions}",
booktitle="Mathematical Foundations of Programming Semantics",
year="1990",
publisher="Springer-Verlag",
address="New York, NY",
pages="209--228",
isbn="978-0-387-34808-7",
doi="10.1007/BFb0040259",
}

@InProceedings{Coquand1990,
author="Coquand, Thierry
and Paulin-Mohring, Christine",
SKIPeditor="Martin-L{\"o}f, Per
and Mints, Grigori",
title="Inductively defined types",
booktitle="COLOG-88",
year="1990",
publisher="Springer",
address="Berlin, Heidelberg",
pages="50--66",
isbn="978-3-540-46963-6",
doi="10.1007/3-540-52335-9_47",
}

@article{Church1940,
 title={A formulation of the simple theory of types},
 volume={5},
 DOI={10.2307/2266170},
 number={2},
 journal={Journal of Symbolic Logic},
 publisher={Cambridge University Press},
 author={Church, Alonzo},
 year={1940},
 pages={56--68}
}

@book{Church1941,
  title={The calculi of lambda-conversion},
  author={Church, Alonzo},
  year={1941},
  publisher={Princeton University Press}
}

@book{Gordon1993,
 editor = {Gordon, Michael J. C. and Melham, T. F.},
 title = {Introduction to {HOL}: A Theorem Proving Environment for Higher Order Logic},
 year = {1993},
 isbn = {0-521-44189-7},
 publisher = {Cambridge University Press},
 address = {New York, NY, USA},
}

@InProceedings{Paulson1984,
author="Paulson, Lawrence",
SKIPeditor="Kahn, Gilles
and MacQueen, David B.
and Plotkin, Gordon",
title="Deriving structural induction in {LCF}",
booktitle="Semantics of Data Types",
year="1984",
publisher="Springer",
address="Berlin, Heidelberg",
pages="197--214",
isbn="978-3-540-38891-3",
doi="10.1007/3-540-13346-1_10",
}

@InProceedings{Berghofer1999,
author="Berghofer, Stefan
and Wenzel, Markus",
SKIPeditor="Bertot, Yves
and Dowek, Gilles
and Th{\'e}ry, Laurent
and Hirschowitz, Andr{\'e}
and Paulin, Christine",
title="Inductive Datatypes in {HOL} --- Lessons Learned in Formal-Logic Engineering",
booktitle="Theorem Proving in Higher Order Logics",
year="1999",
publisher="Springer",
address="Berlin, Heidelberg",
pages="19--36",
isbn="978-3-540-48256-7",
doi="10.1007/3-540-48256-3_3",
}

@Article{Paulson1989,
author="Paulson, Lawrence C.",
title="The foundation of a generic theorem prover",
journal="Journal of Automated Reasoning",
year="1989",
month=sep,
day="01",
volume="5",
number="3",
pages="363--397",
issn="1573-0670",
doi="10.1007/BF00248324",
SKIPurl="https://doi.org/10.1007/BF00248324"
}

@misc{Barendregt1996,
title = {The quest for correctness},
author={Henk Barendregt},
url={http://hdl.handle.net/2066/17273},
note={Images of {SMC} research, {Stichting Mathematisch Centrum}},
}

@InProceedings{Scott1970,
author="Scott, Dana",
SKIPeditor="Laudet, M.
and Lacombe, D.
and Nolin, L.
and Sch{\"u}tzenberger, M.",
title="Constructive validity",
booktitle="Symposium on Automatic Demonstration",
year="1970",
publisher="Springer",
address="Berlin, Heidelberg",
pages="237--275",
isbn="978-3-540-36262-3",
doi="10.1007/BFb0060636",
}

@Inbook{Barendregt2013,
author="Barendregt, Henk",
SKIPeditor="Paule, Peter",
title="Foundations of Mathematics from the Perspective of Computer Verification",
bookTitle="Mathematics, Computer Science and Logic - A Never Ending Story: The Bruno Buchberger Festschrift",
year="2013",
publisher="Springer International Publishing",
address="Cham",
pages="1--49",
isbn="978-3-319-00966-7",
doi="10.1007/978-3-319-00966-7_1",
SKIPurl="https://doi.org/10.1007/978-3-319-00966-7_1"
}

@article{Church1936,
 ISSN = {00029327, 10806377},
 SKIPURL = {http://www.jstor.org/stable/2371045},
 author = {Alonzo Church},
 journal = {American Journal of Mathematics},
 number = {2},
 pages = {345--363},
 publisher = {Johns Hopkins University Press},
 title = {An Unsolvable Problem of Elementary Number Theory},
 volume = {58},
 year = {1936},
 doi = {10.2307/2371054},
}

@book{Milner1997,
 author = {Milner, Robin and Tofte, Mads and Harper, Robert and MacQueen, David},
 title = {The Definition of {Standard ML} (Revised)},
 year = {1997},
 isbn = {9780262631815},
 publisher = {MIT Press},
 address = {Cambridge, MA, USA},
}

@article{Milner1972,
  title={Proving compiler correctness in a mechanized logic},
  author={Milner, Robin and Weyhrauch, Richard},
  SKIPeditor={Bernard Meltzer and Donald Michie},
  journal={Machine Intelligence},
  volume={7},
  pages={51--70},
  year={1972},
}

@techreport{Newey1973,
 author = {Newey, Malcolm C.},
 title = {Axioms and Theorems for Integers, Lists and Finite Sets in {LCF}},
 year = {1973},
 publisher = {Stanford University},
 address = {Stanford, CA, USA},
 note = {Memo AIM-184},
}

@InProceedings{Coquand1985,
author="Coquand, Thierry
and Huet, G{\'e}rard",
SKIPeditor="Buchberger, Bruno",
title="Constructions: A higher order proof system for mechanizing mathematics",
booktitle="EUROCAL '85",
year="1985",
publisher="Springer",
address="Berlin, Heidelberg",
pages="151--184",
isbn="978-3-540-39684-0",
doi="10.1007/3-540-15983-5_13",
}

@Article{Parent1997,
author="Parent-Vigouroux, Catherine",
title="Verifying programs in the calculus of inductive constructions",
journal="Formal Aspects of Computing",
year="1997",
month=sep,
day="01",
volume="9",
number="5",
pages="484--517",
issn="1433-299X",
doi="10.1007/BF01211457",
SKIPurl="https://doi.org/10.1007/BF01211457"
}

@InProceedings{Letouzey2008,
author="Letouzey, Pierre",
SKIPeditor="Beckmann, Arnold
and Dimitracopoulos, Costas
and L{\"o}we, Benedikt",
title="Extraction in {Coq}: An Overview",
booktitle="Logic and Theory of Algorithms",
year="2008",
publisher="Springer",
address="Berlin, Heidelberg",
pages="359--369",
isbn="978-3-540-69407-6",
doi="10.1007/978-3-540-69407-6_39",
}

@phdthesis{Letouzey2004,
  author       = "Pierre Letouzey",
  month        = jul,
  school       = "Universite Paris-Sud",
  title        = "Certified functional programming: Program extraction within {Coq} proof assistant",
  year         = "2004",
  url          = "https://www.irif.fr/~letouzey/download/these_letouzey_English.pdf",
}

@phdthesis{Paulin1989,
  title = {Extraction de programmes dans le Calcul des Constructions},
  author = {Christine Paulin-Mohring},
  year = {1989},
  school = {Universit{\'e} Paris 7},
}

@Article{Berger2005,
author="Berger, Ulrich
and Berghofer, Stefan
and Letouzey, Pierre
and Schwichtenberg, Helmut",
title="Program Extraction from Normalization Proofs",
journal="Studia Logica",
year="2006",
month="Feb",
day="01",
volume="82",
number="1",
pages="25--49",
issn="1572-8730",
doi="10.1007/s11225-006-6604-5",
SKIPurl="https://doi.org/10.1007/s11225-006-6604-5"
}

@misc{Leroy2015,
 author={Xavier Leroy},
 title={Using {Coq's} evaluation mechanisms in anger},
 year = {2015},
 url = {http://gallium.inria.fr/blog/coq-eval/},
}

@InProceedings{Parent1994,
author="Parent, Catherine",
SKIPeditor="Barendregt, Henk
and Nipkow, Tobias",
title="Developing certified programs in the system {Coq}: the {Program} tactic",
booktitle="Types for Proofs and Programs",
year="1994",
publisher="Springer",
address="Berlin, Heidelberg",
pages="291--312",
isbn="978-3-540-48440-0",
doi="10.1007/3-540-58085-9_81",
}

@inproceedings{Paulin-Mohring1989,
 author = {Paulin-Mohring, Christine},
 title = {Extracting {F-omega's} Programs from Proofs in the {Calculus of Constructions}},
 booktitle = {Proceedings of the 16th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '89},
 year = {1989},
 isbn = {0-89791-294-2},
 location = {Austin, Texas, USA},
 pages = {89--104},
 numpages = {16},
 SKIPurl = {http://doi.acm.org/10.1145/75277.75285},
 doi = {10.1145/75277.75285},
 acmid = {75285},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@InProceedings{Parent1995,
author="Parent, Catherine",
SKIPeditor="M{\"o}ller, Bernhard",
title="Synthesizing proofs from programs in the {Calculus of Inductive Constructions}",
booktitle="Mathematics of Program Construction",
year="1995",
publisher="Springer",
address="Berlin, Heidelberg",
pages="351--379",
isbn="978-3-540-49445-4",
doi="10.1007/3-540-60117-1_20",
}

@article{Paulin1993,
title = "Synthesis of {ML} programs in the system {Coq}",
journal = "Journal of Symbolic Computation",
volume = "15",
number = "5",
pages = "607--640",
year = "1993",
issn = "0747-7171",
doi = "10.1016/S0747-7171(06)80007-6",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0747717106800076",
author = "Christine Paulin-Mohring and Benjamin Werner"
}

@InProceedings{Hupel2018,
author="Hupel, Lars
and Nipkow, Tobias",
SKIPeditor="Ahmed, Amal",
title="A Verified Compiler from {Isabelle/HOL} to {CakeML}",
booktitle="Programming Languages and Systems",
year="2018",
publisher="Springer International Publishing",
address="Cham",
pages="999--1026",
isbn="978-3-319-89884-1",
doi="10.1007/978-3-319-89884-1_35",
}

@InCollection{sep-russell-paradox,
  author       =	{Irvine, Andrew David and Deutsch, Harry},
  title        =	{Russell's Paradox},
  booktitle    =	{The Stanford Encyclopedia of Philosophy},
  editor       =	{Edward N. Zalta},
  url =	{https://plato.stanford.edu/archives/win2016/entries/russell-paradox/},
  year         =	{2016},
  edition      =	{Winter 2016},
  publisher    =	{Metaphysics Research Lab, Stanford University}
}

@inbook{Barendregt2007,
author = {Barendregt, Henk},
publisher = {John Wiley \& Sons},
isbn = {9780470050118},
title = {Proofs of Correctness in Mathematics and Industry},
booktitle = {Wiley Encyclopedia of Computer Science and Engineering},
doi = {10.1002/9780470050118.ecse579},
SKIPurl = {https://onlinelibrary.wiley.com/doi/abs/10.1002/9780470050118.ecse579},
SKIPeprint = {https://onlinelibrary.wiley.com/doi/pdf/10.1002/9780470050118.ecse579},
year = {2007},
}

@phdthesis{Matichuk2018,
  title = {Automation for Proof Engineering: Machine-Checked Proofs At Scale},
  author = {Daniel Matichuk},
  year = {2018},
  school = {University of New South Wales},
  url = {http://unsworks.unsw.edu.au/fapi/datastream/unsworks:51703/SOURCE2},
}

@inproceedings{Rushby1981,
 author = {Rushby, J. M.},
 title = {Design and Verification of Secure Systems},
 booktitle = {Proceedings of the Eighth ACM Symposium on Operating Systems Principles},
 series = {SOSP '81},
 year = {1981},
 isbn = {0-89791-062-1},
 location = {Pacific Grove, California, USA},
 pages = {12--21},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/800216.806586},
 doi = {10.1145/800216.806586},
 acmid = {806586},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@InProceedings{Constable1997,
author="Constable, Robert L.",
editor="Schwichtenberg, Helmut",
title="The Structure of {Nuprl's} Type Theory",
booktitle="Logic of Computation",
year="1997",
publisher="Springer",
address="Berlin, Heidelberg",
pages="123--155",
isbn="978-3-642-59048-1",
doi="10.1007/978-3-642-59048-1_4",
}

@InProceedings{Gueneau2017,
author="Gu{\'e}neau, Arma{\"e}l
and Myreen, Magnus O.
and Kumar, Ramana
and Norrish, Michael",
SKIPeditor="Yang, Hongseok",
title="Verified Characteristic Formulae for {CakeML}",
booktitle="Programming Languages and Systems",
year="2017",
publisher="Springer",
address="Berlin, Heidelberg",
pages="584--610",
isbn="978-3-662-54434-1",
doi="10.1007/978-3-662-54434-1_22",
}

@inproceedings{Neis2015,
 author = {Neis, Georg and Hur, Chung-Kil and Kaiser, Jan-Oliver and McLaughlin, Craig and Dreyer, Derek and Vafeiadis, Viktor},
 title = {Pilsner: A Compositionally Verified Compiler for a Higher-order Imperative Language},
 booktitle = {Proceedings of the 20th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP 2015},
 year = {2015},
 isbn = {978-1-4503-3669-7},
 location = {Vancouver, BC, Canada},
 pages = {166--178},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/2784731.2784764},
 doi = {10.1145/2784731.2784764},
 acmid = {2784764},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Anand2017,
  title={{CertiCoq}: A verified compiler for {Coq}},
  author={Abhishek Anand and Andrew W. Appel and Greg Morrisett and Matthew Weaver and Matthieu Sozeau and Olivier {Savary Belanger} and Randy Pollack and Zoe Paraskevopoulou},
  booktitle={CoqPL},
  year={2017},
  url = {http://www.cs.princeton.edu/~appel/papers/certicoq-coqpl.pdf},
}

@inproceedings{CompCert-ERTS-2018,
  author = {Daniel K{\"a}stner and
            Ulrich W{\"u}nsche and
            J{\"o}rg Barrho and 
            Marc Schlickling and
            Bernhard Schommer and
            Michael Schmidt and
            Christian Ferdinand and
            Xavier Leroy and
            Sandrine Blazy},
  title = {{CompCert}: Practical experience on integrating and qualifying
           a formally verified optimizing compiler},
  booktitle = {ERTS 2018: Embedded Real Time Software and Systems},
  publisher = {SEE},
  url = {https://hal.inria.fr/hal-01643290},
  year = 2018,
  month = jan,
}  

@inproceedings{Bourke2017,
 author = {Bourke, Timothy and Brun, L{\'e}lio and Dagand, Pierre-\'{E}variste and Leroy, Xavier and Pouzet, Marc and Rieg, Lionel},
 title = {A Formally Verified Compiler for {Lustre}},
 booktitle = {Proceedings of the 38th ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI 2017},
 year = {2017},
 isbn = {978-1-4503-4988-8},
 location = {Barcelona, Spain},
 pages = {586--601},
 numpages = {16},
 SKIPurl = {http://doi.acm.org/10.1145/3062341.3062358},
 doi = {10.1145/3062341.3062358},
 acmid = {3062358},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@misc{agdavscoq,
 author = {Wouter Swierstra},
 year = {2010},
 title = {{Agda} vs. {Coq}},
 url = {http://wiki.portal.chalmers.se/agda/pmwiki.php?n=Main.AgdaVsCoq}
}

@InProceedings{McBride2015,
author="McBride, Conor",
SKIPeditor="Hinze, Ralf
and Voigtl{\"a}nder, Janis",
title="Turing-Completeness Totally Free",
booktitle="Mathematics of Program Construction",
year="2015",
publisher="Springer International Publishing",
address="Cham",
pages="257--275",
isbn="978-3-319-19797-5",
doi="10.1007/978-3-319-19797-5_13",
}

@inproceedings{Wadler2018,
 title = {Programming Language Foundations in {Agda}},
 author = {Philip Wadler},
 year= {2018},
 url = {http://homepages.inf.ed.ac.uk/wadler/papers/sbmf/sbmf.pdf},
 booktitle = {Brazilian Symposium on Formal Methods},
 month = {September}, 
}

@book{Felleisen2009,
 author = {Felleisen, Matthias and Findler, Robert Bruce and Flatt, Matthew},
 title = {Semantics Engineering with {PLT Redex}},
 year = {2009},
 isbn = {0262062755, 9780262062756},
 publisher = {The MIT Press},
}

@book{Bishop1985,
  title = {Constructive Analysis},
  author = {Errett Bishop and Douglas Bridges},
  publisher = {Springer},
  year = {1985},
  doi = {10.1007/978-3-642-61667-9},
}

@inproceedings{Milner1972b,
 author = {Milner, Robin},
 title = {Implementation and Applications of {Scott's} Logic for Computable Functions},
 booktitle = {Proceedings of ACM Conference on Proving Assertions About Programs},
 year = {1972},
 location = {Las Cruces, New Mexico, USA},
 pages = {1--6},
 SKIPurl = {http://doi.acm.org/10.1145/800235.807067},
 doi = {10.1145/800235.807067},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Jones:IFIP83,
  author    = {Cliff B. Jones},
  title     = {Specification and Design of (Parallel) Programs},
  booktitle = {{IFIP} Congress},
  pages     = {321--332},
  year      = {1983},
}

@inproceedings{Feng:POPL09,
 author = {Feng, Xinyu},
 title = {Local Rely-guarantee Reasoning},
 booktitle = {Proceedings of the 36th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '09},
 year = {2009},
 isbn = {978-1-60558-379-2},
 location = {Savannah, GA, USA},
 pages = {315--327},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/1480881.1480922},
 doi = {10.1145/1480881.1480922},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Sozeau-Tabareau:ITP14,
author="Sozeau, Matthieu
and Tabareau, Nicolas",
SKIPeditor="Klein, Gerwin
and Gamboa, Ruben",
title="Universe Polymorphism in {Coq}",
booktitle="Interactive Theorem Proving",
year="2014",
publisher="Springer",
address="Cham",
pages="499--514",
isbn="978-3-319-08970-6",
doi="10.1007/978-3-319-08970-6_32",
}

@inproceedings{Yu-Shao:ICFP04,
 author = {Yu, Dachuan and Shao, Zhong},
 title = {Verification of Safety Properties for Concurrent Assembly Code},
 booktitle = {Proceedings of the Ninth ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '04},
 year = {2004},
 isbn = {1-58113-905-5},
 location = {Snow Bird, UT, USA},
 pages = {175--188},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/1016850.1016875},
 doi = {10.1145/1016850.1016875},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Gordon-al:TOPLAS17,
 author = {Gordon, Colin S. and Ernst, Michael D. and Grossman, Dan and Parkinson, Matthew J.},
 title = {Verifying Invariants of Lock-Free Data Structures with Rely-Guarantee and Refinement Types},
 journal = {ACM Trans. Program. Lang. Syst.},
 issue_date = {July 2017},
 volume = {39},
 number = {3},
 month = may,
 year = {2017},
 issn = {0164-0925},
 pages = {11:1--11:54},
 articleno = {11},
 numpages = {54},
 SKIPurl = {http://doi.acm.org/10.1145/3064850},
 doi = {10.1145/3064850},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Gu-al:PLDI18,
 author = {Gu, Ronghui and Shao, Zhong and Kim, Jieung and Wu, Xiongnan and Koenig, J{\'e}r{\'e}mie and Sj\"{o}berg, Vilhelm and Chen, Hao and Costanzo, David and Ramananandro, Tahina},
 title = {Certified Concurrent Abstraction Layers},
 booktitle = {Proceedings of the 39th ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI 2018},
 year = {2018},
 isbn = {978-1-4503-5698-5},
 location = {Philadelphia, PA, USA},
 pages = {646--661},
 numpages = {16},
 SKIPurl = {http://doi.acm.org/10.1145/3192366.3192381},
 doi = {10.1145/3192366.3192381},
 acmid = {3192381},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Feng-Shao:ICFP05,
 author = {Feng, Xinyu and Shao, Zhong},
 title = {Modular Verification of Concurrent Assembly Code with Dynamic Thread Creation and Termination},
 booktitle = {Proceedings of the Tenth ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '05},
 year = {2005},
 isbn = {1-59593-064-7},
 location = {Tallinn, Estonia},
 pages = {254--267},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/1086365.1086399},
 doi = {10.1145/1086365.1086399},
 acmid = {1086399},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{DinsdaleYoung-al:ECOOP10,
author="Dinsdale-Young, Thomas
and Dodds, Mike
and Gardner, Philippa
and Parkinson, Matthew J.
and Vafeiadis, Viktor",
SKIPeditor="D'Hondt, Theo",
title="Concurrent Abstract Predicates",
booktitle="ECOOP 2010 -- Object-Oriented Programming",
year="2010",
publisher="Springer",
address="Berlin, Heidelberg",
pages="504--528",
isbn="978-3-642-14107-2",
doi="10.1007/978-3-642-14107-2_24",
}

@misc{iris-tutorial,
  title={Lecture Notes on {Iris}: Higher-Order Concurrent Separation Logic},
  author={Lars Birkedal and Ales Bizjak},
  year={2018},
  url = {https://iris-project.org/tutorial-pdfs/iris-lecture-notes.pdf},
}

@inproceedings{Jung-al:POPL15,
 author = {Jung, Ralf and Swasey, David and Sieczkowski, Filip and Svendsen, Kasper and Turon, Aaron and Birkedal, Lars and Dreyer, Derek},
 title = {Iris: Monoids and Invariants As an Orthogonal Basis for Concurrent Reasoning},
 booktitle = {Proceedings of the 42Nd Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '15},
 year = {2015},
 isbn = {978-1-4503-3300-9},
 location = {Mumbai, India},
 pages = {637--650},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/2676726.2676980},
 doi = {10.1145/2676726.2676980},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Svendsen-Birkedal:ESOP14,
author="Svendsen, Kasper
and Birkedal, Lars",
SKIPeditor="Shao, Zhong",
title="Impredicative Concurrent Abstract Predicates",
booktitle="Programming Languages and Systems",
year="2014",
publisher="Springer",
address="Berlin, Heidelberg",
pages="149--168",
isbn="978-3-642-54833-8",
doi="10.1007/978-3-642-54833-8_9",
}

@article{Klein2015,
	author = {Klein, Gerwin and Andronick, June and Keller, Gabriele and Matichuk, Daniel and Murray, Toby and O'Connor, Liam},
	title = {Provably trustworthy systems},
	volume = {375},
	number = {2104},
	year = {2017},
	doi = {10.1098/rsta.2015.0404},
	publisher = {The Royal Society},
	issn = {1364-503X},
	SKIPURL = {http://rsta.royalsocietypublishing.org/content/375/2104/20150404},
	SKIPeprint = {http://rsta.royalsocietypublishing.org/content/375/2104/20150404.full.pdf},
	journal = {Philosophical Transactions of the Royal Society of London A: Mathematical, Physical and Engineering Sciences}
}

@article{Hoare:CACM69,
 author = {Hoare, C. A. R.},
 title = {An Axiomatic Basis for Computer Programming},
 journal = {Commun. ACM},
 issue_date = {Oct. 1969},
 volume = {12},
 number = {10},
 month = oct,
 year = {1969},
 issn = {0001-0782},
 pages = {576--580},
 numpages = {5},
 SKIPurl = {http://doi.acm.org/10.1145/363235.363259},
 doi = {10.1145/363235.363259},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Floyd1967Flowcharts,
  author = {Floyd, Robert W.},
  journal = {Proceedings of Symposium on Applied Mathematics},
  title = {Assigning Meanings to Programs},
  volume = 19,
  year = 1967
}

@InProceedings{Dockins-Hobor:DS10,
  author =	{Robert Dockins and Aquinas Hobor},
  title =	{A Theory of Termination via Indirection},
  booktitle =	{Modelling, Controlling and Reasoning About State},
  year =	{2010},
  SKIPeditor =	{Amal Ahmed and Nick Benton and Lars Birkedal and Martin Hofmann},
  number =	{10351},
  series =	{Dagstuhl Seminar Proceedings},
  ISSN =	{1862-4405},
  publisher =	{Schloss Dagstuhl - Leibniz-Zentrum fuer Informatik, Germany},
  address =	{Dagstuhl, Germany},
  URL =		{http://drops.dagstuhl.de/opus/volltexte/2010/2805},
}

@article{Dijkstra:CACM75,
 author = {Dijkstra, Edsger W.},
 title = {Guarded Commands, Nondeterminacy and Formal Derivation of Programs},
 journal = {Commun. ACM},
 issue_date = {Aug. 1975},
 volume = {18},
 number = {8},
 month = aug,
 year = {1975},
 issn = {0001-0782},
 pages = {453--457},
 numpages = {5},
 SKIPurl = {http://doi.acm.org/10.1145/360933.360975},
 doi = {10.1145/360933.360975},
 acmid = {360975},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Swamy-al:PLDI13,
 author = {Swamy, Nikhil and Weinberger, Joel and Schlesinger, Cole and Chen, Juan and Livshits, Benjamin},
 title = {Verifying Higher-order Programs with the Dijkstra Monad},
 booktitle = {Proceedings of the 34th ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI '13},
 year = {2013},
 isbn = {978-1-4503-2014-6},
 location = {Seattle, Washington, USA},
 pages = {387--398},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2491956.2491978},
 doi = {10.1145/2491956.2491978},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Swierstra:TPHOLS09,
author="Swierstra, Wouter",
SKIPeditor="Berghofer, Stefan
and Nipkow, Tobias
and Urban, Christian
and Wenzel, Makarius",
title="A Hoare Logic for the State Monad",
booktitle="Theorem Proving in Higher Order Logics",
year="2009",
publisher="Springer",
address="Berlin, Heidelberg",
pages="440--451",
isbn="978-3-642-03359-9",
doi="10.1007/978-3-642-03359-9_30",
}

@InProceedings{OHearn-al:CSL01,
author="O'Hearn, Peter W.
and Reynolds, John
and Yang, Hongseok",
SKIPeditor="Fribourg, Laurent",
title="Local Reasoning about Programs that Alter Data Structures",
booktitle="Computer Science Logic",
year="2001",
publisher="Springer",
address="Berlin, Heidelberg",
pages="1--19",
isbn="978-3-540-44802-0",
doi="10.1007/3-540-44802-0_1",
}

@INPROCEEDINGS{Reynolds:LICS02,
author={Reynolds, John C.},
booktitle={Proceedings 17th Annual IEEE Symposium on Logic in Computer Science},
title={Separation logic: a logic for shared mutable data structures},
year={2002},
pages={55--74},
doi={10.1109/LICS.2002.1029817},
ISSN={1043-6871},
month={July},
}

@InProceedings{Mehta-Nipkow:CADE03,
author="Mehta, Farhad
and Nipkow, Tobias",
SKIPeditor="Baader, Franz",
title="Proving Pointer Programs in Higher-Order Logic",
booktitle="Automated Deduction -- CADE-19",
year="2003",
publisher="Springer",
address="Berlin, Heidelberg",
pages="121--135",
isbn="978-3-540-45085-6",
doi="10.1007/978-3-540-45085-6_10",
}

@inproceedings{Chlipala-al:ICFP09,
 author = {Chlipala, Adam and Malecha, Gregory and Morrisett, Greg and Shinnar, Avraham and Wisnesky, Ryan},
 title = {Effective Interactive Proofs for Higher-order Imperative Programs},
 booktitle = {Proceedings of the 14th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '09},
 year = {2009},
 isbn = {978-1-60558-332-7},
 location = {Edinburgh, Scotland},
 pages = {79--90},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/1596550.1596565},
 doi = {10.1145/1596550.1596565},
 acmid = {1596565},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Gauthier2018,
  author    = {Thibault Gauthier and
               Cezary Kaliszyk and
               Josef Urban and
               Ramana Kumar and
               Michael Norrish},
  title     = {Learning to Prove with Tactics},
  journal   = {CoRR},
  archivePrefix = {arXiv},  
  volume    = {abs/1804.00596},
  eprint    = {1804.00596},
  year      = {2018}
}

@InProceedings{Alkassar2008,
author="Alkassar, Eyad
and Hillebrand, Mark A.
and Leinenbach, Dirk
and Schirmer, Norbert W.
and Starostin, Artem",
SKIPeditor="Shankar, Natarajan
and Woodcock, Jim",
title="The {Verisoft} Approach to Systems Verification",
booktitle="Verified Software: Theories, Tools, Experiments",
year="2008",
publisher="Springer",
address="Berlin, Heidelberg",
pages="209--224",
isbn="978-3-540-87873-5",
doi="10.1007/978-3-540-87873-5_18",
}

@phdthesis{Kumar2015,
  author = {Ramana Kumar},
  title = {Self-compilation and self-verification},
  year = {2015},
  school = {University of Cambridge},
}

@inproceedings{Jourdan2015,
 author = {Jourdan, Jacques-Henri and Laporte, Vincent and Blazy, Sandrine and Leroy, Xavier and Pichardie, David},
 title = {A Formally-Verified {C} Static Analyzer},
 booktitle = {Proceedings of the 42Nd Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '15},
 year = {2015},
 isbn = {978-1-4503-3300-9},
 location = {Mumbai, India},
 pages = {247--259},
 SKIPurl = {http://doi.acm.org/10.1145/2676726.2676966},
 doi = {10.1145/2676726.2676966},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Chargueraud2011b,
 author = {Chargu{\'e}raud, Arthur},
 title = {Characteristic Formulae for the Verification of Imperative Programs},
 booktitle = {Proceedings of the 16th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '11},
 year = {2011},
 isbn = {978-1-4503-0865-6},
 location = {Tokyo, Japan},
 pages = {418--430},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/2034773.2034828},
 doi = {10.1145/2034773.2034828},
 acmid = {2034828},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Article{Chargueraud2017,
author="Chargu{\'e}raud, Arthur
and Pottier, Fran{\c{c}}ois",
title="Verifying the Correctness and Amortized Complexity of a Union-Find Implementation in Separation Logic with Time Credits",
journal="Journal of Automated Reasoning",
year="2017",
month=sep,
day="22",
issn="1573-0670",
doi="10.1007/s10817-017-9431-7",
SKIPurl="https://doi.org/10.1007/s10817-017-9431-7"
}

@inproceedings{Pottier2017,
 author = {Pottier, Fran\c{c}ois},
 title = {Verifying a Hash Table and Its Iterators in Higher-order Separation Logic},
 booktitle = {Proceedings of the 6th ACM SIGPLAN Conference on Certified Programs and Proofs},
 series = {CPP 2017},
 year = {2017},
 isbn = {978-1-4503-4705-1},
 location = {Paris, France},
 pages = {3--16},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/3018610.3018624},
 doi = {10.1145/3018610.3018624},
 acmid = {3018624},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Article{Botaschanjan2008,
author="Botaschanjan, Jewgenij
and Broy, Manfred
and Gruler, Alexander
and Harhurin, Alexander
and Knapp, Steffen
and Kof, Leonid
and Paul, Wolfgang
and Spichkova, Maria",
title="On the correctness of upper layers of automotive systems",
journal="Formal Aspects of Computing",
year="2008",
month="Dec",
day="01",
volume="20",
number="6",
pages="637--662",
issn="1433-299X",
doi="10.1007/s00165-008-0097-0",
SKIPurl="https://doi.org/10.1007/s00165-008-0097-0"
}

@inproceedings{Chen2017,
  publisher        = {ACM},
  booktitle        = {Workshop on Programming Languages and Operating Systems (PLOS)},
  author           = {Chen, Zilin and O'Connor, Liam and Keller, Gabriele and Klein, Gerwin and Heiser, Gernot},
  month            = oct,
  year             = {2017},
  date             = {2017-10-28},
  title            = {The {Cogent} Case for Property-Based Testing},
  pages            = {1--7},
  address          = {Shanghai, China}
}

@InProceedings{Nagashima2017,
author="Nagashima, Yutaka
and Kumar, Ramana",
SKIPeditor="de Moura, Leonardo",
title="A Proof Strategy Language and Proof Script Generation for {Isabelle/HOL}",
booktitle="Automated Deduction -- CADE 26",
year="2017",
publisher="Springer International Publishing",
address="Cham",
pages="528--545",
isbn="978-3-319-63046-5",
doi="10.1007/978-3-319-63046-5_32",
}

@InProceedings{Foster2015,
author="Foster, Simon
and Zeyda, Frank
and Woodcock, Jim",
SKIPeditor="Naumann, David",
title="{Isabelle/UTP}: A Mechanised Theory Engineering Framework",
booktitle="Unifying Theories of Programming",
year="2015",
publisher="Springer International Publishing",
address="Cham",
pages="21--41",
isbn="978-3-319-14806-9",
doi="10.1007/978-3-319-14806-9_2",
}

@inproceedings{Ricketts2014,
 author = {Ricketts, Daniel and Robert, Valentin and Jang, Dongseok and Tatlock, Zachary and Lerner, Sorin},
 title = {Automating Formal Proofs for Reactive Systems},
 booktitle = {Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI '14},
 year = {2014},
 isbn = {978-1-4503-2784-8},
 location = {Edinburgh, United Kingdom},
 pages = {452--462},
 SKIPurl = {http://doi.acm.org/10.1145/2594291.2594338},
 doi = {10.1145/2594291.2594338},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Ziliani2017,
  title={A comprehensible guide to a new unifier for {CIC} including universe polymorphism and overloading},
  volume={27},
  DOI={10.1017/S0956796817000028},
  journal={Journal of Functional Programming},
  publisher={Cambridge University Press},
  author={Ziliani, Beta and Sozeau, Matthieu},
  year={2017},
}

@InProceedings{Huet2002,
  author="Huet, G{\'e}rard",
  SKIPeditor="Carre{\~{n}}o, Victor A.
  and Mu{\~{n}}oz, C{\'e}sar A.
  and Tahar, Sofi{\`e}ne",
  title="Higher Order Unification 30 Years Later",
  booktitle="Theorem Proving in Higher Order Logics",
  year="2002",
  publisher="Springer",
  address="Berlin, Heidelberg",
  pages="3--12",
  doi="10.1007/3-540-45685-6_2",
  isbn="978-3-540-45685-8"
}



@article{Paulson2000,
  author    = {Lawrence C. Paulson},
  title     = {Isabelle: The Next 700 Theorem Provers},
  journal   = {CoRR},
  volume    = {cs.LO/9301106},
  year      = {1993},
  SKIPurl       = {http://arxiv.org/abs/cs.LO/9301106},
  archivePrefix = {arXiv},
  eprint    = {cs.LO/9301106},
  timestamp = {Mon, 13 Aug 2018 16:48:11 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/corr/cs-LO-9301106},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@book{Harper2012,
 author = {Harper, Robert},
 title = {Practical Foundations for Programming Languages},
 year = {2012},
 isbn = {1107029570, 9781107029576},
 publisher = {Cambridge University Press},
 address = {New York, NY, USA},
}

@Inproceedings{Gallego2016,
  author    = {Gallego Arias, Emilio Jes\'us and Pin, Beno\^it and Jouvelot, Pierre},
  year      = {2017},
  title     = {{jsCoq}: Towards Hybrid Theorem Proving Interfaces},
  SKIPeditor    = {Autexier, Serge and Quaresma, Pedro},
  booktitle = {{\rmfamily Proceedings of the 12th Workshop on}
               User Interfaces for Theorem Provers,
               {\rmfamily Coimbra, Portugal, 2nd July 2016}},
  series    = {Electronic Proceedings in Theoretical Computer Science},
  volume    = {239},
  publisher = {Open Publishing Association},
  pages     = {15--27},
  doi       = {10.4204/EPTCS.239.2},
  issn      = {2075-2180}
}

@INPROCEEDINGS{Erbsen2019,
author = {Andres Erbsen and Jade Philipoom and Jason Gross and Robert Sloan and Adam Chlipala},
booktitle = {IEEE Symposium on Security and Privacy},
title = {Simple High-Level Code for Cryptographic Arithmetic - With Proofs, Without Compromises},
year = {2019},
issn = {CFP19020-ART},
doi = {10.1109/SP.2019.00005},
SKIPurl = {https://doi.ieeecomputersociety.org/10.1109/SP.2019.00005},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
month = {may}
}

@inproceedings{dietl2012verification,
 author = {Dietl, Werner and Dietzel, Stephanie and Ernst, Michael D. and Mote, Nathaniel and Walker, Brian and Cooper, Seth and Pavlik, Timothy and Popovi\'{c}, Zoran},
 title = {Verification Games: Making Verification Fun},
 booktitle = {Proceedings of the 14th Workshop on Formal Techniques for Java-like Programs},
 series = {FTfJP '12},
 year = {2012},
 isbn = {978-1-4503-1272-1},
 location = {Beijing, China},
 pages = {42--49},
 numpages = {8},
 SKIPurl = {http://doi.acm.org/10.1145/2318202.2318210},
 doi = {10.1145/2318202.2318210},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{lerner2015polymorphic,
 author = {Lerner, Sorin and Foster, Stephen R. and Griswold, William G.},
 title = {Polymorphic Blocks: Formalism-Inspired UI for Structured Connectors},
 booktitle = {Proceedings of the 33rd Annual ACM Conference on Human Factors in Computing Systems},
 series = {CHI '15},
 year = {2015},
 isbn = {978-1-4503-3145-6},
 location = {Seoul, Republic of Korea},
 pages = {3063--3072},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/2702123.2702302},
 doi = {10.1145/2702123.2702302},
 acmid = {2702302},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{bounov2018inferring,
 author = {Bounov, Dimitar and DeRossi, Anthony and Menarini, Massimiliano and Griswold, William G. and Lerner, Sorin},
 title = {Inferring Loop Invariants Through Gamification},
 booktitle = {Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems},
 series = {CHI '18},
 year = {2018},
 isbn = {978-1-4503-5620-6},
 location = {Montreal QC, Canada},
 pages = {231:1--231:13},
 articleno = {231},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/3173574.3173805},
 doi = {10.1145/3173574.3173805},
 acmid = {3173805},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Hendriks2010,
  title = {Teaching Logic Using a State-of-the-Art Proof Assistant},
  author = {Hendriks, Maxim and Kaliszyk, Cezary and van Raamsdonk, Femke and Wiedijk, Freek},
  journal = {Acta Didactica Napocensia},
  volume = {3},
  number = {2},
  year = {2010},
  pages = {35--48},
}
  
@InProceedings{Wenzel2012,
  author="Wenzel, Makarius",
  SKIPeditor="Jeuring, Johan
  and Campbell, John A.
  and Carette, Jacques
  and Dos Reis, Gabriel
  and Sojka, Petr
  and Wenzel, Makarius
  and Sorge, Volker",
  title="{Isabelle/jEdit} -- A Prover {IDE} within the {PIDE} Framework",
  booktitle="Intelligent Computer Mathematics",
  year="2012",
  publisher="Springer",
  address="Berlin, Heidelberg",
  pages="468--471",
  isbn="978-3-642-31374-5",
  doi="10.1007/978-3-642-31374-5_38",
}

@InProceedings{Corbineau2007,
author="Corbineau, Pierre
and Kaliszyk, Cezary",
SKIPeditor="Kauers, Manuel
and Kerber, Manfred
and Miner, Robert
and Windsteiger, Wolfgang",
title="Cooperative Repositories for Formal Proofs",
booktitle="Towards Mechanized Mathematical Assistants",
year="2007",
publisher="Springer",
address="Berlin, Heidelberg",
pages="221--234",
isbn="978-3-540-73086-6",
doi="10.1007/978-3-540-73086-6_1",
}

@InProceedings{Wenzel2011,
author="Wenzel, Makarius",
SKIPeditor="Davenport, James H.
and Farmer, William M.
and Urban, Josef
and Rabe, Florian",
title="Isabelle as Document-Oriented Proof Assistant",
booktitle="Intelligent Computer Mathematics",
year="2011",
publisher="Springer",
address="Berlin, Heidelberg",
pages="244--259",
isbn="978-3-642-22673-1",
doi="10.1007/978-3-642-22673-1_17",
}

@InProceedings{Arshad2016,
author="Arshad, Fahd
and Mehmood, Hassan
and Raza, Fauzan
and Hasan, Osman",
SKIPeditor="Artho, Cyrille
and {\"O}lveczky, Peter Csaba",
title="{g-HOL}: A Graphical User Interface for the {HOL} Proof Assistant",
booktitle="Formal Techniques for Safety-Critical Systems",
year="2016",
publisher="Springer International Publishing",
address="Cham",
pages="265--269",
isbn="978-3-319-29510-7",
doi="10.1007/978-3-319-29510-7_16",
}

@inproceedings{Kadoda1999,
  author    = {Gada F. Kadoda and
               Roger G. Stone and
               Dan Diaper},
  title     = {Desirable features of educational theorem provers - a cognitive dimensions
               viewpoint},
  booktitle = {{PPIG}},
  pages     = {4},
  publisher = {Psychology of Programming Interest Group},
  year      = {1999}
}

@article{Aitken2000,
author = {Aitken, S. and Melham, T.},
title = {An analysis of errors in interactive proof attempts},
journal = {Interacting with Computers},
volume = {12},
number = {6},
pages = {565-586},
year = {2000},
doi = {10.1016/S0953-5438(99)00023-5},
SKIPURL = {http://dx.doi.org/10.1016/S0953-5438(99)00023-5},
}

@book{Fitch1952,
  author = {F. B. Fitch},
  title = {Symbolic Logic: an Introduction},
  address = {New York, USA},
  publisher = {Ronald Press Company},
  year = {1952},
}

@inbook{Gentzen1969,
  author = {Gerhard Gentzen},
  editor = {M. E. Szabo},
  booktitle = {Collected Papers of Gerhard Gentzen},
  year = {1969},
  title = {Untersuchungen {\"u}ber das logische Schliessen},
  publisher = {North-Holland Publishing Company},
}

@Article{Aspinall2010,
author="Aspinall, David
and Denney, Ewen
and L{\"u}th, Christoph",
title="Tactics for Hierarchical Proof",
journal="Mathematics in Computer Science",
year="2010",
month="May",
day="01",
volume="3",
number="3",
pages="309--330",
issn="1661-8289",
doi="10.1007/s11786-010-0025-6",
SKIPurl="https://doi.org/10.1007/s11786-010-0025-6"
}

@InProceedings{Ring2014,
author="Ring, Martin
and L{\"u}th, Christoph",
SKIPeditor="Klein, Gerwin
and Gamboa, Ruben",
title="Collaborative Interactive Theorem Proving with {Clide}",
booktitle="Interactive Theorem Proving",
year="2014",
publisher="Springer International Publishing",
address="Cham",
pages="467--482",
isbn="978-3-319-08970-6",
doi="10.1007/978-3-319-08970-6_30",
}

@InProceedings{Gonthier2012,
author="Gonthier, Georges
and Tassi, Enrico",
SKIPeditor="Beringer, Lennart
and Felty, Amy",
title="A Language of Patterns for Subterm Selection",
booktitle="Interactive Theorem Proving",
year="2012",
publisher="Springer",
address="Berlin, Heidelberg",
pages="361--376",
isbn="978-3-642-32347-8",
doi="10.1007/978-3-642-32347-8_25",
}

@InProceedings{Keller2018,
author="Keller, Chantal",
SKIPeditor="Dubois, Catherine
and Wolff, Burkhart",
title="Tactic Program-Based Testing and Bounded Verification in {Isabelle/HOL}",
booktitle="Tests and Proofs",
year="2018",
publisher="Springer International Publishing",
address="Cham",
pages="103--119",
isbn="978-3-319-92994-1",
doi="10.1007/978-3-319-92994-1_6",
}

@article{Curry1934,
 ISSN = {00278424},
 URL = {http://www.jstor.org/stable/86796},
 author = {H. B. Curry},
 journal = {Proceedings of the National Academy of Sciences of the United States of America},
 number = {11},
 pages = {584--590},
 publisher = {National Academy of Sciences},
 title = {Functionality in Combinatory Logic},
 volume = {20},
 year = {1934}
}

@inbook{Howard1980,
 author = {W. A. Howard},
 title = {The formulae-as-types notion of constructions},
 editor = {J. P. Seldin and J. R. Hindley},
 booktitle = {To H. B. Curry: Essays on Combinatory Logic, Lambda Calculus and Formalism},
 publisher = {Academic Press},
 year = {1980},
}

@article{Wadler2015,
 author = {Wadler, Philip},
 title = {Propositions As Types},
 journal = {Commun. ACM},
 issue_date = {December 2015},
 volume = {58},
 number = {12},
 month = nov,
 year = {2015},
 issn = {0001-0782},
 pages = {75--84},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/2699407},
 doi = {10.1145/2699407},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Hoare1971,
 author = {Hoare, C. A. R.},
 title = {Proof of a Program: {FIND}},
 journal = {Commun. ACM},
 issue_date = {Jan. 1971},
 volume = {14},
 number = {1},
 month = jan,
 year = {1971},
 issn = {0001-0782},
 pages = {39--45},
 numpages = {7},
 SKIPurl = {http://doi.acm.org/10.1145/362452.362489},
 doi = {10.1145/362452.362489},
 acmid = {362489},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@article{tell-program-automobile,
author = {Lamport, Leslie},
title = {How to Tell a Program from an Automobile},
year = {1977},
month = {January},
url = {https://www.microsoft.com/en-us/research/publication/tell-program-automobile/},
journal = {In A Dynamic and Quick Intellect, John Tromp editor (1996)--a Liber Amicorum issued by the CWI in honor of Paul Vitanyi's 25-year jubilee.},
}

@inproceedings{turing1949,
  title={Checking a large routine},
  author={Turing, Alan},
  booktitle={Report of a Conference on High Speed Automatic Calculating Machines},
  pages={67--69},
  year={1949},
}

@INPROCEEDINGS{murraybp,
  author={Murray, Toby and van Oorschot, P. C.},
  booktitle={IEEE Cybersecurity Development (SecDev)},
  title={{BP}: Formal Proofs, the Fine Print and Side Effects},
  year={2018},
  pages={1--10},
  doi={10.1109/SecDev.2018.00009},
  month={Sep.},
}

@article{Burstall1969,
author = {Burstall, Rodney M.},
title = {Proving Properties of Programs by Structural Induction},
journal = {The Computer Journal},
volume = {12},
number = {1},
pages = {41-48},
year = {1969},
doi = {10.1093/comjnl/12.1.41},
SKIPURL = {http://dx.doi.org/10.1093/comjnl/12.1.41},
}

@incollection{McCarthy1963,
title = "A Basis for a Mathematical Theory of Computation",
editor = "P. Braffort and D. Hirschberg",
series = "Studies in Logic and the Foundations of Mathematics",
publisher = "Elsevier",
volume = "35",
pages = "33 - 70",
year = "1963",
booktitle = "Computer Programming and Formal Systems",
issn = "0049-237X",
doi = "10.1016/S0049-237X(08)72018-4",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0049237X08720184",
author = "John McCarthy",
}

@InProceedings{tkhol,
author="Syme, Donald",
SKIPeditor="Thomas Schubert, E.
and Windley, Philip J.
and Alves-Foss, James",
title="A new interface for {HOL} --- Ideas, issues and implementation",
booktitle="Higher Order Logic Theorem Proving and Its Applications",
year="1995",
publisher="Springer",
address="Berlin, Heidelberg",
pages="324--339",
isbn="978-3-540-44784-9",
doi="10.1007/3-540-60275-5_74",
}

@Article{Naur1966,
author="Naur, Peter",
title="Proof of algorithms by general snapshots",
journal="BIT Numerical Mathematics",
year="1966",
month="Jul",
day="01",
volume="6",
number="4",
pages="310--316",
issn="1572-9125",
doi="10.1007/BF01966091",
SKIPurl="https://doi.org/10.1007/BF01966091"
}

@Inbook{Floyd1993,
author="Floyd, Robert W.",
SKIPeditor="Colburn, Timothy R.
and Fetzer, James H.
and Rankin, Terry L.",
title="Assigning Meanings to Programs",
bookTitle="Program Verification: Fundamental Issues in Computer Science",
year="1993",
publisher="Springer Netherlands",
address="Dordrecht",
pages="65--81",
isbn="978-94-011-1793-7",
doi="10.1007/978-94-011-1793-7_4",
SKIPurl="https://doi.org/10.1007/978-94-011-1793-7_4"
}

@article{Backus1978,
 author = {Backus, John},
 title = {Can Programming Be Liberated from the {von Neumann} Style?: A Functional Style and Its Algebra of Programs},
 journal = {Commun. ACM},
 issue_date = {Aug. 1978},
 volume = {21},
 number = {8},
 month = aug,
 year = {1978},
 issn = {0001-0782},
 pages = {613--641},
 numpages = {29},
 SKIPurl = {http://doi.acm.org/10.1145/359576.359579},
 doi = {10.1145/359576.359579},
 acmid = {359579},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{PitClaudel2018,
  title = {Correct-by-construction implementation of runtime monitors using stepwise refinement},
  author = {Teng Zhang and John Wiegley and Theophilos Giannakopoulos and Gregory Eakman and Cl{\'e}ment Pit-Claudel and Insup Lee and Oleg Sokolsky},
  booktitle = {International Symposium Dependable Software Engineering: Theories, Tools, and Applications},
  year = {2018},
  pages = {31--49},
}

@InProceedings{Harrison2006,
author="Harrison, John",
SKIPeditor="Furbach, Ulrich
and Shankar, Natarajan",
title="Towards Self-verification of {HOL Light}",
booktitle="Automated Reasoning",
year="2006",
publisher="Springer",
address="Berlin, Heidelberg",
pages="177--191",
isbn="978-3-540-37188-5",
doi="10.1007/11814771_17",
}

@Article{Kumar2016,
author="Kumar, Ramana
and Arthan, Rob
and Myreen, Magnus O.
and Owens, Scott",
title="Self-Formalisation of Higher-Order Logic",
journal="Journal of Automated Reasoning",
year="2016",
month="Mar",
day="01",
volume="56",
number="3",
pages="221--259",
issn="1573-0670",
doi="10.1007/s10817-015-9357-x",
SKIPurl="https://doi.org/10.1007/s10817-015-9357-x"
}

@article{McCarthy1960,
 author = {McCarthy, John},
 title = {Recursive Functions of Symbolic Expressions and Their Computation by Machine, Part I},
 journal = {Commun. ACM},
 issue_date = {April 1960},
 volume = {3},
 number = {4},
 month = apr,
 year = {1960},
 issn = {0001-0782},
 pages = {184--195},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/367177.367199},
 doi = {10.1145/367177.367199},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Book{MartinLof1982a,
 author = {Martin-L{\"o}f, Per},
 title = {Intuitionistic Type Theory},
 publisher = {Bibliopolis},
 year = {1984},
}

@InProceedings{Oury2005,
author="Oury, Nicolas",
SKIPeditor="Hurd, Joe
and Melham, Tom",
title="Extensionality in the Calculus of Constructions",
booktitle="Theorem Proving in Higher Order Logics",
year="2005",
publisher="Springer",
address="Berlin, Heidelberg",
pages="278--293",
isbn="978-3-540-31820-0",
doi="10.1007/11541868_18",
}

@InProceedings{McBride2002,
author="McBride, Conor",
SKIPeditor="Callaghan, Paul
and Luo, Zhaohui
and McKinna, James
and Pollack, Robert
and Pollack, Robert",
title="Elimination with a Motive",
booktitle="Types for Proofs and Programs",
year="2002",
publisher="Springer",
address="Berlin, Heidelberg",
pages="197--216",
isbn="978-3-540-45842-5",
doi="10.1007/3-540-45842-5_13",
}

@article{Russell1906,
author = {Russell, Bertrand},
title = {On Some Difficulties in the Theory of Transfinite Numbers and Order Types},
journal = {Proceedings of the London Mathematical Society},
volume = {s2-4},
number = {1},
pages = {29-53},
doi = {10.1112/plms/s2-4.1.29},
year = {1906},
SKIPurl = {https://londmathsoc.onlinelibrary.wiley.com/doi/abs/10.1112/plms/s2-4.1.29},
}

@incollection{Feferman2005,
  author = {Solomon Feferman},
  publisher = {Oxford University Press},
  pages = {590--624},
  title = {Predicativity},
  booktitle = {Oxford Handbook of Philosophy of Mathematics and Logic},
  year = {2005},
  editor = {Stewart Shapiro},
}

@article{Aitken1998,
title = "Interactive Theorem Proving: An Empirical Study of User Activity",
journal = "Journal of Symbolic Computation",
volume = "25",
number = "2",
pages = "263 - 284",
year = "1998",
issn = "0747-7171",
doi = "10.1006/jsco.1997.0175",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0747717197901759",
author = "J.S. Aitken and P. Gray and T. Melham and M. Thomas",
}

@article{Chlipala2007,
title = "Position Paper: Thoughts on Programming with Proof Assistants",
journal = "Electronic Notes in Theoretical Computer Science",
volume = "174",
number = "7",
pages = "17--21",
year = "2007",
note = "Proceedings of the Programming Languages meets Program Verification (PLPV 2006)",
issn = "1571-0661",
doi = "10.1016/j.entcs.2006.10.035",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S1571066107002502",
author = "Adam Chlipala",
}

@inproceedings{Gross2018,
  title = {Reification by Parametricity: Fast Setup for Proof by Reflection, in Two Lines of {L}tac},
  author = {Jason Gross and Andres Erbsen and Adam Chlipala},
  booktitle = {Proceedings of the 9th International Conference on Interactive Theorem Proving (ITP'18)},
  year = {2018},
  month = {July},
  url = {https://people.csail.mit.edu/jgross/personal-website/papers/2018-reification-by-parametricity-itp-camera-ready.pdf}
}

@InProceedings{Werner1997,
author="Werner, Benjamin",
SKIPeditor="Abadi, Mart{\'i}n
and Ito, Takayasu",
title="Sets in types, types in sets",
booktitle="Theoretical Aspects of Computer Software",
year="1997",
publisher="Springer",
address="Berlin, Heidelberg",
pages="530--546",
isbn="978-3-540-69530-1",
doi="10.1007/BFb0014566",
}

@inproceedings{Winterhalter2019,
  TITLE = {{Eliminating Reflection from Type Theory}},
  AUTHOR = {Winterhalter, Th{\'e}o and Sozeau, Matthieu and Tabareau, Nicolas},
  URL = {https://hal.archives-ouvertes.fr/hal-01849166},
  BOOKTITLE = {{CPP 2019 - The 8th ACM SIGPLAN International Conference on Certified Programs and Proofs}},
  ADDRESS = {Lisbon, Portugal},
  PAGES = {1--19},
  YEAR = {2019},
  MONTH = Jan,
  PDF = {https://hal.archives-ouvertes.fr/hal-01849166/file/cpp19.pdf},
}

@inproceedings{Chu2017,
 author = {Chu, Shumo and Weitz, Konstantin and Cheung, Alvin and Suciu, Dan},
 title = {{HoTTSQL}: Proving Query Rewrites with Univalent {SQL} Semantics},
 booktitle = {Proceedings of the 38th ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI 2017},
 year = {2017},
 isbn = {978-1-4503-4988-8},
 location = {Barcelona, Spain},
 pages = {510--524},
 numpages = {15},
 SKIPurl = {http://doi.acm.org/10.1145/3062341.3062348},
 doi = {10.1145/3062341.3062348},
 acmid = {3062348},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Angiuli2016,
  title={Homotopical patch theory},
  volume={26},
  DOI={10.1017/S0956796816000198},
  journal={Journal of Functional Programming},
  publisher={Cambridge University Press},
  author={Angiuli, Carlo and Morehouse, Edward and Licata, Daniel R. and Harper, Robert},
  year={2016},
  pages={e18}
}

@inproceedings{Reynolds1983,
  author    = {John C. Reynolds},
  title     = {Types, Abstraction and Parametric Polymorphism},
  booktitle = {{IFIP} Congress},
  pages     = {513--523},
  year      = {1983},
}  

@inproceedings{van2012engineering,
  title={Engineering proof by reflection in {Agda}},
  author={Van Der Walt, Paul and Swierstra, Wouter},
  booktitle={Symposium on Implementation and Application of Functional Languages},
  pages={157--173},
  year={2012},
  publisher={Springer},
  doi={10.1007/978-3-642-41582-1_10},
}

@incollection{MartinLof1982b,
title = "Constructive Mathematics and Computer Programming",
SKIPeditor = "L. Jonathan Cohen and Jerzy Los and Helmut Pfeiffer and Klaus-Peter Podewski",
series = "Studies in Logic and the Foundations of Mathematics",
publisher = "Elsevier",
volume = "104",
pages = "153--175",
year = "1982",
booktitle = "Logic, Methodology and Philosophy of Science VI",
issn = "0049-237X",
doi = "10.1016/S0049-237X(09)70189-2",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0049237X09701892",
author = "Per Martin-L{\"o}f",
}

@InProceedings{claret2013lightweight,
author="Claret, Guillaume
and del Carmen Gonz{\'a}lez Huesca, Lourdes
and R{\'e}gis-Gianas, Yann
and Ziliani, Beta",
editor="Blazy, Sandrine
and Paulin-Mohring, Christine
and Pichardie, David",
title="Lightweight Proof by Reflection Using a Posteriori Simulation of Effectful Computation",
booktitle="Interactive Theorem Proving",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="67--83",
isbn="978-3-642-39634-2",
doi="10.1007/978-3-642-39634-2_8",
}

@InProceedings{Pollack1994,
author="Pollack, Robert",
editor="Dybjer, Peter
and Nordstr{\"o}m, Bengt
and Smith, Jan",
title="On extensibility of proof checkers",
booktitle="Types for Proofs and Programs",
year="1995",
publisher="Springer",
address="Berlin, Heidelberg",
pages="140--161",
isbn="978-3-540-47770-9",
doi="10.1007/3-540-60579-7_8",
}

@inproceedings{Demers95reflectionin,
    author = {Francois-Nicola Demers and Jacques Malenfant},
    title = {Reflection in logic, functional and object-oriented programming: a Short Comparative Study},
    booktitle = {In IJCAI '95 Workshop on Reflection and Metalevel Architectures and their Applications in AI},
    year = {1995},
    pages = {29--38}
}

@techreport{harrison-reflection,
        author          = "John Harrison",
        title           = "Metatheory and Reflection in Theorem Proving:
                           A Survey and Critique",
        institution     = "SRI Cambridge",
        address         = "Millers Yard, Cambridge, UK",
        year            = 1995,
        type            = "Technical Report",
        number          = "CRC-053",
	url = {http://www.cl.cam.ac.uk/~jrh13/papers/reflect.dvi.gz},
}

@inproceedings{lescuyer2009improving,
  title={Improving {Coq} propositional reasoning using a lazy {CNF} conversion scheme},
  author={Lescuyer, St{\'e}phane and Conchon, Sylvain},
  booktitle={International Symposium on Frontiers of Combining Systems},
  pages={287--303},
  year={2009},
  organization={Springer}
}

@Article{paulson1999generic,
  author =     "Lawrence C. Paulson",
  title =      "A Generic Tableau Prover and its Integration with {Isabelle}",
  journal =    "Journal of Universal Computer Science",
  year =       "1999",
  volume =     "5",
  number =     "3",
  pages =      "73--87",
  month =      "mar",
  doi = "10.3217/jucs-005-03-0073",
}

@article{hurd2003first,
  title={First-order proof tactics in higher-order logic theorem provers},
  author={Hurd, Joe},
  journal={Design and Application of Strategies/Tactics in Higher Order Logics, number NASA/CP-2003-212448 in NASA Technical Reports},
  pages={56--68},
  year={2003}
}

@INPROCEEDINGS{kumar1991integrating,
author={Kumar, Ramayya and Kropf, Thomas and Schneider, Klaus},
booktitle={1991 International Workshop on the HOL Theorem Proving System and Its Applications},
title={Integrating A First-order Automatic prover In The {HOL} Environment},
year={1991},
pages={170--176},
doi={10.1109/HOL.1991.596284},
month={Aug},
}

@InProceedings{busch1994first,
author="Busch, Holger",
SKIPeditor="Melham, Thomas F.
and Camilleri, Juanito",
title="First-order automation for higher-order-logic theorem proving",
booktitle="Higher Order Logic Theorem Proving and Its Applications",
year="1994",
publisher="Springer",
address="Berlin, Heidelberg",
pages="97--112",
isbn="978-3-540-48803-3",
doi="10.1007/3-540-58450-1_37",
}

@InProceedings{dahn1997integration,
author="Dahn, B. I.
and Gehne, J.
and Honigmann, Th.
and Wolf, A.",
SKIPeditor="McCune, William",
title="Integration of automated and interactive theorem proving in {ILF}",
booktitle="Automated Deduction---CADE-14",
year="1997",
publisher="Springer",
address="Berlin, Heidelberg",
pages="57--60",
isbn="978-3-540-69140-2",
doi="10.1007/3-540-63104-6_7",
}

@InProceedings{hurd1999integrating,
author="Hurd, Joe",
SKIPeditor="Bertot, Yves
and Dowek, Gilles
and Th{\'e}ry, Laurent
and Hirschowitz, Andr{\'e}
and Paulin, Christine",
title="Integrating {Gandalf} and {HOL}",
booktitle="Theorem Proving in Higher Order Logics",
year="1999",
publisher="Springer",
address="Berlin, Heidelberg",
pages="311--321",
isbn="978-3-540-48256-7",
doi="10.1007/3-540-48256-3_21",
}

@article{bezem2002automated,
  title={Automated proof construction in type theory using resolution},
  author={Bezem, Marc and Hendriks, Dimitri and De Nivelle, Hans},
  journal={Journal of Automated Reasoning},
  volume={29},
  number={3},
  pages={253--275},
  year={2002},
  publisher={Springer}
}

@Article{nipkow1989term,
author="Nipkow, Tobias",
title="Term rewriting and beyond --- theorem proving in {Isabelle}",
journal="Formal Aspects of Computing",
year="1989",
month="Mar",
day="01",
volume="1",
number="1",
pages="320--338",
issn="1433-299X",
doi="10.1007/BF01887212",
SKIPurl="https://doi.org/10.1007/BF01887212"
}

@InProceedings{mcbride1996inverting,
author="McBride, Conor",
SKIPeditor="Gim{\'e}nez, Eduardo
and Paulin-Mohring, Christine",
title="Inverting inductively defined relations in {LEGO}",
booktitle="Types for Proofs and Programs",
year="1998",
publisher="Springer",
address="Berlin, Heidelberg",
pages="236--253",
isbn="978-3-540-49562-8",
doi="10.1007/BFb0097795",
}

@InProceedings{cornes1995automating,
author="Cornes, Cristina
and Terrasse, Delphine",
SKIPeditor="Berardi, Stefano
and Coppo, Mario",
title="Automating inversion of inductive predicates in {Coq}",
booktitle="Types for Proofs and Programs",
year="1996",
publisher="Springer",
address="Berlin, Heidelberg",
pages="85--104",
isbn="978-3-540-70722-6",
doi="10.1007/3-540-61780-9_64",
}

@book{Wiedijk2006,
 author = {Wiedijk, Freek},
 title = {The Seventeen Provers of the World: Foreword by Dana S. Scott (Lecture Notes in Computer Science / Lecture Notes in Artificial Intelligence)},
 year = {2006},
 isbn = {3540307044},
 doi = {10.1007/11542384},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
}

@inproceedings{watt2018mechanising,
 author = {Watt, Conrad},
 title = {Mechanising and Verifying the {WebAssembly} Specification},
 booktitle = {Proceedings of the 7th ACM SIGPLAN International Conference on Certified Programs and Proofs},
 series = {CPP 2018},
 year = {2018},
 isbn = {978-1-4503-5586-5},
 location = {Los Angeles, CA, USA},
 pages = {53--65},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/3167082},
 doi = {10.1145/3167082},
 acmid = {3167082},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Dybjer1995,
author="Dybjer, Peter",
SKIPeditor="Berardi, Stefano
and Coppo, Mario",
title="Internal type theory",
booktitle="Types for Proofs and Programs",
year="1996",
publisher="Springer",
address="Berlin, Heidelberg",
pages="120--134",
isbn="978-3-540-70722-6",
doi="10.1007/3-540-61780-9_66",
}

@inproceedings{Altenkirch2016,
 author = {Altenkirch, Thorsten and Kaposi, Ambrus},
 title = {Type Theory in Type Theory Using Quotient Inductive Types},
 booktitle = {Proceedings of the 43rd Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages},
 series = {POPL '16},
 year = {2016},
 isbn = {978-1-4503-3549-2},
 location = {St. Petersburg, FL, USA},
 pages = {18--29},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2837614.2837638},
 doi = {10.1145/2837614.2837638},
 acmid = {2837638},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{forsberg2010inductive,
author="Nordvall Forsberg, Fredrik
and Setzer, Anton",
SKIPeditor="Dawar, Anuj
and Veith, Helmut",
title="Inductive-Inductive Definitions",
booktitle="Computer Science Logic",
year="2010",
publisher="Springer",
address="Berlin, Heidelberg",
pages="454--468",
isbn="978-3-642-15205-4",
doi="10.1007/978-3-642-15205-4_35",
}

@Article{chaieb2008proof,
author="Chaieb, Amine
and Nipkow, Tobias",
title="Proof Synthesis and Reflection for Linear Arithmetic",
journal="Journal of Automated Reasoning",
year="2008",
month="Jun",
day="04",
volume="41",
number="1",
pages="33--59",
issn="1573-0670",
doi="10.1007/s10817-008-9101-x",
SKIPurl="https://doi.org/10.1007/s10817-008-9101-x"
}

@article{lin2016understanding,
  title={Understanding and maintaining tactics graphically OR how we are learning that a diagram can be worth more than 10K LoC},
  author={Lin, Yuhui and Grov, Gudmund and Arthan, Rob},
  journal   = {CoRR},
  volume    = {abs/1610.05593},
  year={2016},
  archivePrefix = {arXiv},
  eprint    = {1610.05593},  
}

@InProceedings{lammich2013refinement,
author="Lammich, Peter",
SKIPeditor="Blazy, Sandrine
and Paulin-Mohring, Christine
and Pichardie, David",
title="Automatic Data Refinement",
booktitle="Interactive Theorem Proving",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="84--99",
isbn="978-3-642-39634-2",
doi="10.1007/978-3-642-39634-2_9",
}

@Article{lammich2015refinement,
author="Lammich, Peter",
title="Refinement to Imperative {HOL}",
journal="Journal of Automated Reasoning",
year="2019",
month="Apr",
day="01",
volume="62",
number="4",
pages="481--503",
issn="1573-0670",
doi="10.1007/s10817-017-9437-1",
SKIPurl="https://doi.org/10.1007/s10817-017-9437-1"
}

@article{buchberger2000theory,
  title={Theory exploration with Theorema},
  author={Buchberger, Bruno},
  journal={Analele Universitatii Din Timisoara, ser. Matematica-Informatica},
  volume={38},
  number={2},
  pages={9--32},
  year={2000},
  publisher={Citeseer}
}

@article{JohanssonRSC14,
  author    = {Moa Johansson and
               Dan Ros{\'{e}}n and
               Nicholas Smallbone and
               Koen Claessen},
  title     = {Hipster: Integrating Theory Exploration in a Proof Assistant},
  journal   = {CoRR},
  volume    = {abs/1405.3426},
  year      = {2014},
  SKIPurl       = {http://arxiv.org/abs/1405.3426},
  archivePrefix = {arXiv},
  eprint    = {1405.3426},
  timestamp = {Mon, 13 Aug 2018 16:48:53 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/corr/JohanssonRSC14},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{Johansson2017,
  title={Automated Theory Exploration for Interactive Theorem Proving},
  author={Johansson, Moa},
  booktitle={International Conference on Interactive Theorem Proving},
  pages={1--11},
  year={2017},
  organization={Springer},
  doi = {10.1007/978-3-319-66107-0_1},
}

@InProceedings{urban2011,
author="Urban, Christian
and Kaliszyk, Cezary",
SKIPeditor="Barthe, Gilles",
title="General Bindings and Alpha-Equivalence in {Nominal Isabelle}",
booktitle="Programming Languages and Systems",
year="2011",
publisher="Springer",
address="Berlin, Heidelberg",
pages="480--500",
isbn="978-3-642-19718-5",
doi="10.1007/978-3-642-19718-5_25",
}

@InProceedings{Homeier05,
author="Homeier, Peter V.",
editor="Hurd, Joe
and Melham, Tom",
title="A Design Structure for Higher Order Quotients",
booktitle="Theorem Proving in Higher Order Logics",
year="2005",
publisher="Springer",
address="Berlin, Heidelberg",
pages="130--146",
isbn="978-3-540-31820-0",
doi="10.1007/11541868_9",
}

@InProceedings{kanav2014conference,
author="Kanav, Sudeep
and Lammich, Peter
and Popescu, Andrei",
SKIPeditor="Biere, Armin
and Bloem, Roderick",
title="A Conference Management System with Verified Document Confidentiality",
booktitle="Computer Aided Verification",
year="2014",
publisher="Springer",
address="Cham",
pages="167--183",
isbn="978-3-319-08867-9",
doi="10.1007/978-3-319-08867-9_11",
}

@Article{blanchette2018verified,
author="Blanchette, Jasmin Christian
and Fleury, Mathias
and Lammich, Peter
and Weidenbach, Christoph",
title="A Verified {SAT} Solver Framework with Learn, Forget, Restart, and Incrementality",
journal="Journal of Automated Reasoning",
year="2018",
month="Jun",
day="01",
volume="61",
number="1",
pages="333--365",
issn="1573-0670",
doi="10.1007/s10817-018-9455-7",
SKIPurl="https://doi.org/10.1007/s10817-018-9455-7"
}

@inproceedings{schlichtkrull2019verified,
 author = {Schlichtkrull, Anders and Blanchette, Jasmin Christian and Traytel, Dmitriy},
 title = {A Verified Prover Based on Ordered Resolution},
 booktitle = {Proceedings of the 8th ACM SIGPLAN International Conference on Certified Programs and Proofs},
 series = {CPP 2019},
 year = {2019},
 isbn = {978-1-4503-6222-1},
 location = {Cascais, Portugal},
 pages = {152--165},
 numpages = {14},
 SKIPurl = {http://doi.acm.org/10.1145/3293880.3294100},
 doi = {10.1145/3293880.3294100},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{esparza2013fully,
author="Esparza, Javier
and Lammich, Peter
and Neumann, Ren{\'e}
and Nipkow, Tobias
and Schimpf, Alexander
and Smaus, Jan-Georg",
SKIPeditor="Sharygina, Natasha
and Veith, Helmut",
title="A Fully Verified Executable {LTL} Model Checker",
booktitle="Computer Aided Verification",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="463--478",
isbn="978-3-642-39799-8",
doi="10.1007/978-3-642-39799-8_31",
}

@InProceedings{wimmer2018verified,
author="Wimmer, Simon
and Lammich, Peter",
SKIPeditor="Beyer, Dirk
and Huisman, Marieke",
title="Verified Model Checking of Timed Automata",
booktitle="Tools and Algorithms for the Construction and Analysis of Systems",
year="2018",
publisher="Springer",
address="Cham",
pages="61--78",
isbn="978-3-319-89960-2",
doi="10.1007/978-3-319-89960-2_4",
}

@inproceedings{Devriese2011,
 author = {Devriese, Dominique and Piessens, Frank},
 title = {On the Bright Side of Type Classes: Instance Arguments in {Agda}},
 booktitle = {Proceedings of the 16th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '11},
 year = {2011},
 isbn = {978-1-4503-0865-6},
 location = {Tokyo, Japan},
 pages = {143--155},
 numpages = {13},
 SKIPurl = {http://doi.acm.org/10.1145/2034773.2034796},
 doi = {10.1145/2034773.2034796},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Haftmann2010,
 author = {Haftmann, Florian and Nipkow, Tobias},
 title = {Code Generation via Higher-order Rewrite Systems},
 booktitle = {Proceedings of the 10th International Conference on Functional and Logic Programming},
 series = {FLOPS'10},
 year = {2010},
 isbn = {3-642-12250-7, 978-3-642-12250-7},
 location = {Sendai, Japan},
 pages = {103--117},
 numpages = {15},
 SKIPurl = {http://dx.doi.org/10.1007/978-3-642-12251-4_9},
 doi = {10.1007/978-3-642-12251-4_9},
 acmid = {2175441},
 publisher = {Springer-Verlag},
 address = {Berlin, Heidelberg},
}

@InProceedings{Haftmann2013,
author="Haftmann, Florian
and Krauss, Alexander
and Kun{\v{c}}ar, Ond{\v{r}}ej
and Nipkow, Tobias",
doi="10.1007/978-3-642-39634-2_10",
SKIPeditor="Blazy, Sandrine
and Paulin-Mohring, Christine
and Pichardie, David",
title="Data Refinement in {Isabelle/HOL}",
booktitle="Interactive Theorem Proving",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="100--115",
isbn="978-3-642-39634-2"
}

@InProceedings{Benton2013,
author="Benton, Nick",
SKIPeditor="Shan, Chung-chieh",
title="The Proof Assistant as an Integrated Development Environment",
booktitle="Programming Languages and Systems",
year="2013",
publisher="Springer International Publishing",
address="Cham",
pages="307--314",
doi="10.1007/978-3-319-03542-0_22",
isbn="978-3-319-03542-0"
}

@article{Klein2018,
 author = {Klein, Gerwin and Andronick, June and Fernandez, Matthew and Kuz, Ihor and Murray, Toby and Heiser, Gernot},
 title = {Formally Verified Software in the Real World},
 journal = {Commun. ACM},
 issue_date = {October 2018},
 volume = {61},
 number = {10},
 month = sep,
 year = {2018},
 issn = {0001-0782},
 pages = {68--77},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/3230627},
 doi = {10.1145/3230627},
 acmid = {3230627},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{escardo2018self,
  title={A self-contained, brief and complete formulation of {Voevodsky's} Univalence Axiom},
  author={Escard{\'o}, Martin H{\"o}tzel},
  journal   = {CoRR},
  volume    = {abs/1803.02294},
  archivePrefix = {arXiv},
  eprint    = {1803.02294},  
  year={2018},
}

@book{univalent2013homotopy,
  author =    {{Univalent Foundations Program}},
  title =     {Homotopy Type Theory: Univalent Foundations of Mathematics},
  url = {https://homotopytypetheory.org/book},
  address =   {Institute for Advanced Study},
  year =      {2013}
}

@article{Paulson2017,
  author    = {Lawrence C. Paulson},
  title     = {Formalising Mathematics In Simple Type Theory},
  journal   = {CoRR},
  volume    = {abs/1804.07860},
  year      = {2018},
  archivePrefix = {arXiv},
  eprint    = {1804.07860},  
  SKIPurl       = {http://arxiv.org/abs/1804.07860},
}

@article{Heyting1956,
  author = {Arend Heyting},
  title = {Intuitionism. An introduction},
  publisher = {North-Holland Publishing Company},
  year = {1956},
}

@InProceedings{cohen2016cubical,
  author =	{Cyril Cohen and Thierry Coquand and Simon Huber and Anders M{\"o}rtberg},
  title =	{Cubical Type Theory: A Constructive Interpretation of the {Univalence} Axiom},
  booktitle =	{21st International Conference on Types for Proofs and Programs (TYPES 2015)},
  pages =	{5:1--5:34},
  series =	{Leibniz International Proceedings in Informatics (LIPIcs)},
  ISBN =	{978-3-95977-030-9},
  ISSN =	{1868-8969},
  year =	{2018},
  volume =	{69},
  editor =	{Tarmo Uustalu},
  publisher =	{Schloss Dagstuhl--Leibniz-Zentrum fuer Informatik},
  address =	{Dagstuhl, Germany},
  SKIPURL =		{http://drops.dagstuhl.de/opus/volltexte/2018/8475},
  SKIPURN =		{urn:nbn:de:0030-drops-84754},
  doi =		{10.4230/LIPIcs.TYPES.2015.5},
}

@article{Abel2017,
 author = {Abel, Andreas and Vezzosi, Andrea and Winterhalter, Theo},
 title = {Normalization by Evaluation for Sized Dependent Types},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {September 2017},
 volume = {1},
 number = {ICFP},
 month = aug,
 year = {2017},
 issn = {2475-1421},
 pages = {33:1--33:30},
 articleno = {33},
 numpages = {30},
 SKIPurl = {http://doi.acm.org/10.1145/3110277},
 doi = {10.1145/3110277},
 acmid = {3110277},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Blanchette2011,
author="Blanchette, Jasmin Christian
and Bulwahn, Lukas
and Nipkow, Tobias",
SKIPeditor="Tinelli, Cesare
and Sofronie-Stokkermans, Viorica",
title="Automatic Proof and Disproof in {Isabelle/HOL}",
booktitle="Frontiers of Combining Systems",
year="2011",
publisher="Springer",
address="Berlin, Heidelberg",
pages="12--27",
isbn="978-3-642-24364-6",
doi="10.1007/978-3-642-24364-6_2",
}

@InProceedings{Biendarra2017,
author="Biendarra, Julian
and Blanchette, Jasmin Christian
and Bouzy, Aymeric
and Desharnais, Martin
and Fleury, Mathias
and H{\"o}lzl, Johannes
and Kun{\v{c}}ar, Ond{\v{r}}ej
and Lochbihler, Andreas
and Meier, Fabian
and Panny, Lorenz
and Popescu, Andrei
and Sternagel, Christian
and Thiemann, Ren{\'e}
and Traytel, Dmitriy",
SKIPeditor="Dixon, Clare
and Finger, Marcelo",
title="Foundational (Co)datatypes and (Co)recursion for Higher-Order Logic",
booktitle="Frontiers of Combining Systems",
year="2017",
publisher="Springer International Publishing",
address="Cham",
pages="3--21",
isbn="978-3-319-66167-4",
doi="10.1007/978-3-319-66167-4_1",
}

@InProceedings{Cohen2013,
author="Cohen, Cyril
and D{\'e}n{\`e}s, Maxime
and M{\"o}rtberg, Anders",
SKIPeditor="Gonthier, Georges
and Norrish, Michael",
title="Refinements for Free!",
booktitle="Certified Programs and Proofs",
year="2013",
publisher="Springer International Publishing",
address="Cham",
pages="147--162",
isbn="978-3-319-03545-1",
doi="10.1007/978-3-319-03545-1_10",
}

@InProceedings{Slotosch1997,
author="Slotosch, Oscar",
SKIPeditor="Gunter, Elsa L.
and Felty, Amy",
title="Higher order quotients and their implementation in {Isabelle/HOL}",
booktitle="Theorem Proving in Higher Order Logics",
year="1997",
publisher="Springer",
address="Berlin, Heidelberg",
pages="291--306",
isbn="978-3-540-69526-4",
doi="10.1007/BFb0028401",
}

@article{Paulson2006,
 author = {Paulson, Lawrence C.},
 title = {Defining Functions on Equivalence Classes},
 journal = {ACM Trans. Comput. Logic},
 issue_date = {October 2006},
 volume = {7},
 number = {4},
 month = oct,
 year = {2006},
 issn = {1529-3785},
 pages = {658--675},
 numpages = {18},
 SKIPurl = {http://doi.acm.org/10.1145/1183278.1183280},
 doi = {10.1145/1183278.1183280},
 acmid = {1183280},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@InProceedings{Cohen2013b,
author="Cohen, Cyril",
SKIPeditor="Blazy, Sandrine
and Paulin-Mohring, Christine
and Pichardie, David",
title="Pragmatic Quotient Types in {Coq}",
booktitle="Interactive Theorem Proving",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="213--228",
isbn="978-3-642-39634-2",
doi="10.1007/978-3-642-39634-2_17",
}

@article{Armstrong2019,
 author = {Armstrong, Alasdair and Bauereiss, Thomas and Campbell, Brian and Reid, Alastair and Gray, Kathryn E. and Norton, Robert M. and Mundkur, Prashanth and Wassell, Mark and French, Jon and Pulte, Christopher and Flur, Shaked and Stark, Ian and Krishnaswami, Neel and Sewell, Peter},
 title = {{ISA} Semantics for {ARMv8-a}, {RISC-v}, and {CHERI-MIPS}},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {January 2019},
 volume = {3},
 number = {POPL},
 month = jan,
 year = {2019},
 issn = {2475-1421},
 pages = {71:1--71:31},
 articleno = {71},
 numpages = {31},
 SKIPurl = {http://doi.acm.org/10.1145/3290384},
 doi = {10.1145/3290384},
 acmid = {3290384},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Dam2013,
 author = {Dam, Mads and Guanciale, Roberto and Khakpour, Narges and Nemati, Hamed and Schwarz, Oliver},
 title = {Formal Verification of Information Flow Security for a Simple {ARM-based} Separation Kernel},
 booktitle = {Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security},
 series = {CCS '13},
 year = {2013},
 isbn = {978-1-4503-2477-9},
 location = {Berlin, Germany},
 pages = {223--234},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/2508859.2516702},
 doi = {10.1145/2508859.2516702},
 acmid = {2516702},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Guanciale2016,
  author = {Guanciale, Roberto and Nemati, Hamed and Dam, Mads and Baumann, Christoph},
  title = {Provably secure memory isolation for {Linux} on {ARM}},
  year = {2016},
  journal = {Journal of Computer Security},
  volume = {24},
  number = {6},
  pages = {793--837},
  doi = {10.3233/JCS-160558},
}  

@article{Bishop2018,
 author = {Bishop, Steve and Fairbairn, Matthew and Mehnert, Hannes and Norrish, Michael and Ridge, Tom and Sewell, Peter and Smith, Michael and Wansbrough, Keith},
 title = {Engineering with Logic: Rigorous Test-Oracle Specification and Validation for {TCP/IP} and the {Sockets API}},
 journal = {J. ACM},
 issue_date = {January 2019},
 volume = {66},
 number = {1},
 month = dec,
 year = {2018},
 issn = {0004-5411},
 pages = {1:1--1:77},
 articleno = {1},
 numpages = {77},
 SKIPurl = {http://doi.acm.org/10.1145/3243650},
 doi = {10.1145/3243650},
 acmid = {3243650},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@Article{Sewell2017,
author="Sewell, Thomas
and Kam, Felix
and Heiser, Gernot",
title="High-assurance timing analysis for a high-assurance real-time operating system",
journal="Real-Time Systems",
year="2017",
month=sep,
day="01",
volume="53",
number="5",
pages="812--853",
issn="1573-1383",
doi="10.1007/s11241-017-9286-3",
SKIPurl="https://doi.org/10.1007/s11241-017-9286-3"
}

@Article{Bundy2011,
author="Bundy, Alan",
title="Automated theorem provers: a practical tool for the working mathematician?",
journal="Annals of Mathematics and Artificial Intelligence",
year="2011",
month="Jul",
day="16",
volume="61",
number="1",
pages="3",
issn="1573-7470",
doi="10.1007/s10472-011-9248-8",
SKIPurl="https://doi.org/10.1007/s10472-011-9248-8"
}

@InProceedings{Fox2010,
author="Fox, Anthony
and Myreen, Magnus O.",
SKIPeditor="Kaufmann, Matt
and Paulson, Lawrence C.",
title="A Trustworthy Monadic Formalization of the {ARMv7} Instruction Set Architecture",
booktitle="Interactive Theorem Proving",
year="2010",
publisher="Springer",
address="Berlin, Heidelberg",
pages="243--258",
isbn="978-3-642-14052-5",
doi="10.1007/978-3-642-14052-5_18",
}

@article{Jung2018,
title={Iris from the ground up: A modular foundation for higher-order concurrent separation logic},
volume={28},
doi={10.1017/S0956796818000151},
journal={Journal of Functional Programming},
publisher={Cambridge University Press},
author = {Jung, Ralf and Krebbers, Robbert and Jourdan, Jacques-Henri and Bizjak, Ales and Birkedal, Lars and Dreyer, Derek},
year={2018},
pages={e20},
}

@article{Jung2017,
 author = {Jung, Ralf and Jourdan, Jacques-Henri and Krebbers, Robbert and Dreyer, Derek},
 title = {{RustBelt}: Securing the Foundations of the {Rust} Programming Language},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {January 2018},
 volume = {2},
 number = {POPL},
 month = dec,
 year = {2017},
 issn = {2475-1421},
 pages = {66:1--66:34},
 articleno = {66},
 numpages = {34},
 SKIPurl = {http://doi.acm.org/10.1145/3158154},
 doi = {10.1145/3158154},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Cohn1983,
author = {Cohn, A.},
title = {The Equivalence of Two Semantic Definitions: A Case Study in {LCF}},
journal = {SIAM Journal on Computing},
volume = {12},
number = {2},
pages = {267--285},
year = {1983},
doi = {10.1137/0212016},
SKIPURL = {https://doi.org/10.1137/0212016},
}

@inproceedings{Boulton1992,
 author = {Boulton, Richard J. and Gordon, Andrew and Gordon, Michael J. C. and Harrison, John and Herbert, John and Tassel, John Van},
 title = {Experience with Embedding Hardware Description Languages in {HOL}},
 booktitle = {Proceedings of the IFIP TC10/WG 10.2 International Conference on Theorem Provers in Circuit Design: Theory, Practice and Experience},
 year = {1992},
 isbn = {0-444-89686-4},
 pages = {129--156},
 numpages = {28},
 acmid = {672777},
 publisher = {North-Holland Publishing Co.},
 address = {Amsterdam, The Netherlands},
}

@misc{CoqOPAM,
  title = {{Coq OPAM Package Index}},
  author = {{Coq development team}},
  year = {2018},
  url = {https://coq.inria.fr/opam/www/},
  accessed={February 10th, 2019},
}

@InProceedings{Whiteside2012,
author="Whiteside, Iain
and Aspinall, David
and Grov, Gudmund",
SKIPeditor="Jeuring, Johan
and Campbell, John A.
and Carette, Jacques
and Dos Reis, Gabriel
and Sojka, Petr
and Wenzel, Makarius
and Sorge, Volker",
title="An Essence of {SSReflect}",
booktitle="Intelligent Computer Mathematics",
year="2012",
publisher="Springer",
address="Berlin, Heidelberg",
pages="186--201",
isbn="978-3-642-31374-5",
doi="10.1007/978-3-642-31374-5_13",
}

@inproceedings{Gordon1978,
 author = {Gordon, Michael J. C. and Milner, Robin and Morris, L. and Newey, Malcolm C. and Wadsworth, Christopher P.},
 title = {A Metalanguage for Interactive Proof in {LCF}},
 booktitle = {Proceedings of the 5th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages},
 series = {POPL '78},
 year = {1978},
 location = {Tucson, Arizona},
 pages = {119--130},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/512760.512773},
 doi = {10.1145/512760.512773},
 acmid = {512773},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Kaliszyk2015b,
title = "Learning-assisted theorem proving with millions of lemmas",
journal = "Journal of Symbolic Computation",
volume = "69",
pages = "109--128",
year = "2015",
note = "Symbolic Computation in Software Science",
issn = "0747-7171",
doi = "10.1016/j.jsc.2014.09.032",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S074771711400100X",
author = "Cezary Kaliszyk and Josef Urban",
}

@inproceedings{Sozeau2007,
 author = {Sozeau, Matthieu},
 title = {Program-ing Finger Trees in {Coq}},
 booktitle = {Proceedings of the 12th ACM SIGPLAN International Conference on Functional Programming},
 series = {ICFP '07},
 year = {2007},
 isbn = {978-1-59593-815-2},
 location = {Freiburg, Germany},
 pages = {13--24},
 numpages = {12},
 SKIPurl = {http://doi.acm.org/10.1145/1291151.1291156},
 doi = {10.1145/1291151.1291156},
 acmid = {1291156},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Tan2019,
  title={The verified {CakeML} compiler backend},
  volume={29},
  doi={10.1017/S0956796818000229},
  journal={Journal of Functional Programming},
  publisher={Cambridge University Press},
  author = {Tan, Yong Kiam and Myreen, Magnus O. and Kumar, Ramana and Fox, Anthony and Owens, Scott and Norrish, Michael},
  year={2019},
  pages={e2},
}

@inproceedings{Hurd2013,
 author = {Leslie-Hurd, Joe},
 title = {Maintaining Verified Software},
 booktitle = {Proceedings of the 2013 ACM SIGPLAN Symposium on Haskell},
 series = {Haskell '13},
 year = {2013},
 isbn = {978-1-4503-2383-3},
 location = {Boston, Massachusetts, USA},
 pages = {71--80},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/2503778.2503787},
 doi = {10.1145/2503778.2503787},
 acmid = {2503787},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Obua2016,
author="Obua, Steven
and Scott, Phil
and Fleuriot, Jacques",
SKIPeditor="Sampaio, Augusto
and Wang, Farn",
title="{ProofScript}: Proof Scripting for the Masses",
booktitle="Theoretical Aspects of Computing -- ICTAC 2016",
year="2016",
publisher="Springer International Publishing",
address="Cham",
pages="333--348",
isbn="978-3-319-46750-4",
doi="10.1007/978-3-319-46750-4_19",
}

@InProceedings{Jiang2018,
author="Jiang, Yaqing
and Papapanagiotou, Petros
and Fleuriot, Jacques",
SKIPeditor="Fleuriot, Jacques
and Wang, Dongming
and Calmet, Jacques",
title="Machine Learning for Inductive Theorem Proving",
booktitle="Artificial Intelligence and Symbolic Computation",
year="2018",
publisher="Springer International Publishing",
address="Cham",
pages="87--103",
isbn="978-3-319-99957-9",
doi="10.1007/978-3-319-99957-9_6",
}

@InProceedings{Dixon2003,
author="Dixon, Lucas
and Fleuriot, Jacques",
SKIPeditor="Baader, Franz",
title="{IsaPlanner}: A Prototype Proof Planner in {Isabelle}",
booktitle="Automated Deduction -- CADE-19",
year="2003",
publisher="Springer",
address="Berlin, Heidelberg",
pages="279--283",
isbn="978-3-540-45085-6",
doi="10.1007/978-3-540-45085-6_22",
}

@Inbook{Urban2013,
author="Urban, Josef
and Vysko{\v{c}}il, Ji{\v{r}}{\'i}",
editor="Bonacina, Maria Paola
and Stickel, Mark E.",
title="Theorem Proving in Large Formal Mathematics as an Emerging {AI} Field",
bookTitle="Automated Reasoning and Mathematics: Essays in Memory of William W. McCune",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="240--257",
isbn="978-3-642-36675-8",
doi="10.1007/978-3-642-36675-8_13",
SKIPurl="https://doi.org/10.1007/978-3-642-36675-8_13"
}

@inproceedings{Wilson2010,
  TITLE = {Inductive Proof Automation for {Coq}},
  AUTHOR = {Wilson, Sean and Fleuriot, Jacques and Smaill, Alan},
  URL = {https://hal.inria.fr/inria-00489496},
  BOOKTITLE = {{Second Coq Workshop}},
  ADDRESS = {Edinburgh, United Kingdom},
  SKIPEDITOR = {Yves Bertot},
  YEAR = {2010},
  MONTH = Jul,
}

@article{Stratulat2017,
title = "Mechanically certifying formula-based {Noetherian} induction reasoning",
journal = "Journal of Symbolic Computation",
volume = "80",
pages = "209--49",
year = "2017",
issn = "0747-7171",
doi = "10.1016/j.jsc.2016.07.014",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0747717116300517",
author = "Sorin Stratulat",
}

@inproceedings{Henaien2012,
  author    = {Amira Henaien and
               Sorin Stratulat},
  title     = {Performing Implicit Induction Reasoning with Certifying Proof Environments},
  booktitle = {Proceedings Fourth International Symposium on Symbolic Computation
               in Software Science, {SCSS} 2012, Gammarth, Tunisia, 15-17 December
               2012.},
  pages     = {97--108},
  year      = {2012},
  SKIPurl       = {https://doi.org/10.4204/EPTCS.122.9},
  doi       = {10.4204/EPTCS.122.9},
 
}

@INPROCEEDINGS{Stratulat2016,
author={S. {Stratulat}},
booktitle={2016 18th International Symposium on Symbolic and Numeric Algorithms for Scientific Computing (SYNASC)},
title={Structural vs. Cyclic Induction: A Report on Some Experiments with {Coq}},
year={2016},
pages={29--36},
doi={10.1109/SYNASC.2016.018},
ISSN={2470-881X},
month={Sep.},
}

@InProceedings{Adams2016,
author="Adams, Mark",
SKIPeditor="Blanchette, Jasmin Christian
and Merz, Stephan",
title="{HOL Zero's} Solutions for {Pollack-Inconsistency}",
booktitle="Interactive Theorem Proving",
year="2016",
publisher="Springer International Publishing",
address="Cham",
pages="20--35",
isbn="978-3-319-43144-4",
doi="10.1007/978-3-319-43144-4_2",
}

@article{Adams2016b,
  author = {Mark Adams},
  title = {Proof Auditing Formalised Mathematics},
  journal = {Journal of Formalized Reasoning},
  volume = {9},
  number = {1},
  year = {2016},
  issn = {1972-5787},
  pages = {3--32},
  doi = {10.6092/issn.1972-5787/4576},
  SKIPurl = {https://jfr.unibo.it/article/view/4576}
}

@article{Courant2007,
  title={A module calculus for Pure Type Systems},
  volume={17},
  DOI={10.1017/S0956796806005867},
  number={3},
  journal={Journal of Functional Programming},
  publisher={Cambridge University Press},
  author={Courant, Judica{\"e}l},
  year={2007},
  pages={287--352}
}

@InProceedings{Chrzaszcz2004,
author="Chrz{\k{a}}szcz, Jacek",
SKIPeditor="Berardi, Stefano
and Coppo, Mario
and Damiani, Ferruccio",
title="Modules in {Coq} Are and Will Be Correct",
booktitle="Types for Proofs and Programs",
year="2004",
publisher="Springer",
address="Berlin, Heidelberg",
pages="130--146",
isbn="978-3-540-24849-1",
doi="10.1007/978-3-540-24849-1_9",
}

@phdthesis{Soubiran2010,
  TITLE = {{Modular development of theories and name-space management for the {Coq} proof assistant}},
  AUTHOR = {Soubiran, Elie},
  URL = {https://tel.archives-ouvertes.fr/tel-00679201},
  SCHOOL = {{Ecole Polytechnique X}},
  YEAR = {2010},
  MONTH = Sep,
  PDF = {https://tel.archives-ouvertes.fr/tel-00679201/file/these.pdf},
}

@inproceedings{Soubiran2009,
 author = {Soubiran, Elie},
 title = {A Unified Framework and a Transparent Name-space for the {Coq} Module System},
 booktitle = {Proceedings of the 1st Workshop on Modules and Libraries for Proof Assistants},
 series = {MLPA '09},
 year = {2009},
 isbn = {978-1-60558-954-1},
 location = {Montreal, Canada},
 pages = {38--45},
 numpages = {8},
 SKIPurl = {http://doi.acm.org/10.1145/1735813.1735820},
 doi = {10.1145/1735813.1735820},
 acmid = {1735820},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@InProceedings{Czajka2016,
  author =	{Lukasz Czajka},
  title =	{{A Shallow Embedding of Pure Type Systems into First-Order Logic}},
  booktitle =	{22nd International Conference on Types for Proofs and  Programs (TYPES 2016)},
  pages =	{9:1--9:39},
  series =	{Leibniz International Proceedings in Informatics (LIPIcs)},
  ISBN =	{978-3-95977-065-1},
  ISSN =	{1868-8969},
  year =	{2018},
  volume =	{97},
  SKIPeditor =	{Silvia Ghilezan and Herman Geuvers and Jelena Ivetić},
  publisher =	{Schloss Dagstuhl--Leibniz-Zentrum fuer Informatik},
  address =	{Dagstuhl, Germany},
  SKIPURL =		{http://drops.dagstuhl.de/opus/volltexte/2018/9853},
  URN =		{urn:nbn:de:0030-drops-98533},
  doi =		{10.4230/LIPIcs.TYPES.2016.9},
}

@InProceedings{Harrison1996,
author="Harrison, John",
SKIPeditor="Gim{\'e}nez, Eduardo
and Paulin-Mohring, Christine",
title="Proof style",
booktitle="Types for Proofs and Programs",
year="1998",
publisher="Springer",
address="Berlin, Heidelberg",
pages="154--172",
isbn="978-3-540-49562-8",
doi="10.1007/BFb0097791",
}

@InProceedings{Kaliszyk2017b,
author="Kaliszyk, Cezary
and Urban, Josef
and Vysko{\v{c}}il, Ji{\v{r}}{\'i}",
SKIPeditor="Ayala-Rinc{\'o}n, Mauricio
and Mu{\~{n}}oz, C{\'e}sar A.",
title="Automating Formalization by Statistical and Semantic Parsing of Mathematics",
booktitle="Interactive Theorem Proving",
year="2017",
publisher="Springer International Publishing",
address="Cham",
pages="12--27",
isbn="978-3-319-66107-0",
doi="10.1007/978-3-319-66107-0_2",
}

@article{Obua2014,
  author    = {Steven Obua and
               Jacques D. Fleuriot and
               Phil Scott and
               David Aspinall},
  title     = {{ProofPeer}: Collaborative Theorem Proving},
  journal   = {CoRR},
  volume    = {abs/1404.6186},
  year      = {2014},
  archivePrefix = {arXiv},
  eprint    = {1404.6186},  
  SKIPurl       = {http://arxiv.org/abs/1404.6186},
}

@article{Meng2009,
title = "Lightweight relevance filtering for machine-generated resolution problems",
journal = "Journal of Applied Logic",
volume = "7",
number = "1",
pages = "41--57",
year = "2009",
note = "Special Issue: Empirically Successful Computerized Reasoning",
issn = "1570-8683",
doi = "10.1016/j.jal.2007.07.004",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S1570868307000626",
author = "Jia Meng and Lawrence C. Paulson",
}

@InProceedings{Luth2013,
author="L{\"u}th, Christoph
and Ring, Martin",
SKIPeditor="Carette, Jacques
and Aspinall, David
and Lange, Christoph
and Sojka, Petr
and Windsteiger, Wolfgang",
title="A Web Interface for {Isabelle}: The Next Generation",
booktitle="Intelligent Computer Mathematics",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="326--329",
isbn="978-3-642-39320-4",
doi="10.1007/978-3-642-39320-4_22"
}

@InProceedings{Kuhlwein2012,
author="K{\"u}hlwein, Daniel
and van Laarhoven, Twan
and Tsivtsivadze, Evgeni
and Urban, Josef
and Heskes, Tom",
SKIPeditor="Gramlich, Bernhard
and Miller, Dale
and Sattler, Uli",
title="Overview and Evaluation of Premise Selection Techniques for Large Theory Mathematics",
booktitle="Automated Reasoning",
year="2012",
publisher="Springer",
address="Berlin, Heidelberg",
pages="378--392",
isbn="978-3-642-31365-3",
doi="10.1007/978-3-642-31365-3_30",
}

@INPROCEEDINGS{Hutter2000,
author={Dieter {Hutter}},
booktitle={Proceedings ASE 2000. Fifteenth IEEE International Conference on Automated Software Engineering},
title={Management of change in structured verification},
year={2000},
pages={23--31},
doi={10.1109/ASE.2000.873647},
ISSN={1938-4300},
month={Sep.},
}

@InProceedings{Grabowski2007,
author="Grabowski, Adam
and Schwarzweller, Christoph",
SKIPeditor="Kauers, Manuel
and Kerber, Manfred
and Miner, Robert
and Windsteiger, Wolfgang",
title="Revisions as an Essential Tool to Maintain Mathematical Repositories",
booktitle="Towards Mechanized Mathematical Assistants",
year="2007",
publisher="Springer",
address="Berlin, Heidelberg",
pages="235--249",
isbn="978-3-540-73086-6",
doi="10.1007/978-3-540-73086-6_20",
}

@ARTICLE{Klein2012,
author = {Gerwin Klein and Gernot Heiser and Toby Murray},
journal = {IEEE Security \& Privacy},
title = {It's Time for Trustworthy Systems},
year = {2012},
volume = {10},
number = {02},
issn = {1540-7993},
pages = {67--70},
doi = {10.1109/MSP.2012.41},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
month = {mar}
}

@inproceedings{Adams2015b,
  SKIPurl = {https://arxiv.org/abs/1507.08718},
  doi = {10.4204/EPTCS.186.6},
  title = {The {Common HOL Platform}},
  author = {Mark Adams},
  booktitle = {4th Workshop on Proof eXchange for Theorem Proving},
}

@inproceedings{Spiwack2010,
  TITLE = {An abstract type for constructing tactics in {Coq}},
  AUTHOR = {Spiwack, Arnaud},
  URL = {https://hal.inria.fr/inria-00502500},
  BOOKTITLE = {Proof Search in Type Theory},
  ADDRESS = {Edinburgh, United Kingdom},
  YEAR = {2010},
  MONTH = Jul,
}

@misc{Mueller2019,
  title = {The {Coq} Library as a Theory Graph},
  author = {M{\"u}ller, Dennis and Rabe, Florian and Sacerdoti Coen, Claudio},
  url = {https://kwarc.info/people/frabe/Research/MRS_coq_19.pdf},
  year = {2019},
}

@techreport{Filliatre2000,
  author = {Jean-Christophe Filli\^atre},
  title = {{Design of a proof assistant: {Coq} version 7}},
  institution = {{LRI, Universit\'e Paris Sud}},
  type = {{Research Report}},
  number = 1369,
  month = oct,
  year = 2000,
  url = {http://www.lri.fr/~filliatr/ftp/publis/coqv7.ps.gz},
}

@InProceedings{Asperti2007,
author="Asperti, Andrea
and Coen, Claudio Sacerdoti
and Tassi, Enrico
and Zacchiroli, Stefano",
SKIPeditor="Altenkirch, Thorsten
and McBride, Conor",
title="Crafting a Proof Assistant",
booktitle="Types for Proofs and Programs",
year="2007",
publisher="Springer",
address="Berlin, Heidelberg",
pages="18--32",
isbn="978-3-540-74464-1",
doi="10.1007/978-3-540-74464-1_2",
}

@Article{Asperti2009b,
author="Asperti, A.
and Ricciotti, W.
and Sacerdoti Coen, C.
and Tassi, E.",
title="A compact kernel for the calculus of inductive constructions",
journal="Sadhana",
year="2009",
month="Feb",
day="01",
volume="34",
number="1",
pages="71--144",
issn="0973-7677",
doi="10.1007/s12046-009-0003-3",
SKIPurl="https://doi.org/10.1007/s12046-009-0003-3"
}

@inbook{Coquand1990b,
  author = {Thierry Coquand},
  title = {Metamathematical investigations of a calculus of constructions},
  booktitle = {Logic and Computer Science},
  publisher = {Academic Press},
  year = {1990},
  pages = {91-122},
  editor = {P. Odifreddi},
  url = {http://www.cse.chalmers.se/~coquand/meta.pdf},
}

@InProceedings{Bertot1994,
author="Bertot, Yves
and Kahn, Gilles
and Th{\'e}ry, Laurent",
SKIPeditor="Hagiya, Masami
and Mitchell, John C.",
title="Proof by pointing",
booktitle="Theoretical Aspects of Computer Software",
year="1994",
publisher="Springer",
address="Berlin, Heidelberg",
pages="141--160",
isbn="978-3-540-48383-0",
doi="10.1007/3-540-57887-0_94",
}

@Article{Bertot1999,
author="Bertot, Yves",
title="The {CtCoq} System: Design and Architecture",
journal="Formal Aspects of Computing",
year="1999",
month="Sep",
volume="11",
number="3",
pages="225--243",
issn="1433-299X",
doi="10.1007/s001650050049",
SKIPurl="https://doi.org/10.1007/s001650050049"
}

@InProceedings{Heras2013b,
author="Heras, J{\'o}nathan
and Komendantskaya, Ekaterina",
SKIPeditor="Carette, Jacques
and Aspinall, David
and Lange, Christoph
and Sojka, Petr
and Windsteiger, Wolfgang",
title="{ML4PG} in Computer Algebra Verification",
booktitle="Intelligent Computer Mathematics",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="354--358",
isbn="978-3-642-39320-4",
doi="10.1007/978-3-642-39320-4_28",
}

@inproceedings{Yang2019,
 title = {Learning to Prove Theorems via Interacting with Proof Assistants},
 author = {Kaiyu Yang and Jia Deng},
 booktitle = {International Conference on Machine Learning},
 year = {2019},
}

@article{Bansal2019,
  author    = {Kshitij Bansal and
               Sarah M. Loos and
               Markus N. Rabe and
               Christian Szegedy and
               Stewart Wilcox},
  title     = {{HOList}: An Environment for Machine Learning of Higher-Order Theorem Proving (extended version)},
  journal   = {CoRR},
  volume    = {abs/1904.03241},
  year      = {2019},
  archivePrefix = {arXiv},
  eprint    = {1904.03241},
  SKIPurl       = {http://arxiv.org/abs/1904.03241},
}

@inproceedings{Hellendoorn2018,
  author    = {Vincent J. Hellendoorn and
               Premkumar T. Devanbu and
               Mohammad Amin Alipour},
  title     = {On the naturalness of proofs},
  booktitle = {{FSE NIER}},
  pages     = {724--728},
  year      = {2018},
  doi       = {10.1145/3236024.3264832},
}

@inproceedings{Huang2018,
title={{GamePad}: {A} Learning Environment for Theorem Proving},
author={Daniel Huang and Prafulla Dhariwal and Dawn Song and Ilya Sutskever},
booktitle={International Conference on Learning Representations},
year={2019},
url={https://openreview.net/forum?id=r1xwKoR9Y7},
}

@InProceedings{Kuhlwein2013,
author="K{\"u}hlwein, Daniel
and Blanchette, Jasmin Christian
and Kaliszyk, Cezary
and Urban, Josef",
LONGSKIPeditor="Blazy, Sandrine
and Paulin-Mohring, Christine
and Pichardie, David",
title="{MaSh}: Machine Learning for {Sledgehammer}",
booktitle="Interactive Theorem Proving",
year="2013",
publisher="Springer",
address="Berlin, Heidelberg",
pages="35--50",
isbn="978-3-642-39634-2",
doi="10.1007/978-3-642-39634-2_6",
}

@InProceedings{Jourdan2012,
author="Jourdan, Jacques-Henri
and Pottier, Fran{\c{c}}ois
and Leroy, Xavier",
SKIPeditor="Seidl, Helmut",
title="Validating {LR(1)} Parsers",
booktitle="Programming Languages and Systems",
year="2012",
publisher="Springer",
address="Berlin, Heidelberg",
pages="397--416",
isbn="978-3-642-28869-2",
doi="10.1007/978-3-642-28869-2_20",
}

@InProceedings{Keller2010,
author="Keller, Chantal
and Werner, Benjamin",
SKIPeditor="Kaufmann, Matt
and Paulson, Lawrence C.",
title="Importing {HOL Light} into {Coq}",
booktitle="Interactive Theorem Proving",
year="2010",
publisher="Springer",
address="Berlin, Heidelberg",
pages="307--322",
isbn="978-3-642-14052-5",
doi="10.1007/978-3-642-14052-5_22",
}

@misc{Chlipala2018,
  title = {The Surprising Security Benefits of End-to-End Formal Proofs},
  author = {Adam Chlipala},
  url = {https://www.cccblog.org/2018/06/13/the-surprising-security-benefits-of-end-to-end-formal-proofs/},
  year = {2018},
}

@inproceedings{Aldrich2008,
 author = {Aldrich, Jonathan and Simmons, Robert J. and Shin, Key},
 title = {{SASyLF}: An Educational Proof Assistant for Language Theory},
 booktitle = {Proceedings of the 2008 International Workshop on Functional and Declarative Programming in Education},
 series = {FDPE '08},
 year = {2008},
 isbn = {978-1-60558-068-5},
 location = {Victoria, BC, Canada},
 pages = {31--40},
 numpages = {10},
 doi = {10.1145/1411260.1411266},
 acmid = {1411266},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {education, logical framework, metatheory, proof assistant},
}

@Article{Miller2018,
author="Miller, Dale",
title="Mechanized Metatheory Revisited",
journal="Journal of Automated Reasoning",
year="2018",
month="Oct",
day="04",
issn="1573-0670",
doi="10.1007/s10817-018-9483-3",
SKIPurl="https://doi.org/10.1007/s10817-018-9483-3"
}

@techreport{Sozeau2019,
  TITLE = {{The MetaCoq Project}},
  AUTHOR = {Sozeau, Matthieu and Anand, Abhishek and Boulier, Simon and Cohen, Cyril and Forster, Yannick and Kunze, Fabian and Malecha, Gregory and Tabareau, Nicolas and Winterhalter, Th{\'e}o},
  URL = {https://hal.inria.fr/hal-02167423},
  institution = {{INRIA}},
  YEAR = {2019},
  MONTH = Jun,
}

@InProceedings{zeller2014,
author="Zeller, Peter
and Bieniusa, Annette
and Poetzsch-Heffter, Arnd",
SKIPeditor="{\'A}brah{\'a}m, Erika
and Palamidessi, Catuscia",
title="Formal Specification and Verification of {CRDTs}",
booktitle="Formal Techniques for Distributed Objects, Components, and Systems",
year="2014",
publisher="Springer",
address="Berlin, Heidelberg",
pages="33--48",
isbn="978-3-662-43613-4",
doi="10.1007/978-3-662-43613-4_3",
}

@article{gomes2017verifying,
 author = {Gomes, Victor B. F. and Kleppmann, Martin and Mulligan, Dominic P. and Beresford, Alastair R.},
 title = {Verifying Strong Eventual Consistency in Distributed Systems},
 journal = {Proc. ACM Program. Lang.},
 issue_date = {October 2017},
 volume = {1},
 number = {OOPSLA},
 month = oct,
 year = {2017},
 issn = {2475-1421},
 pages = {109:1--109:28},
 articleno = {109},
 numpages = {28},
 SKIPurl = {http://doi.acm.org/10.1145/3133933},
 doi = {10.1145/3133933},
 acmid = {3133933},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@article{Bates1985,
 author = {Bates, Joseph L. and Constable, Robert L.},
 title = {Proofs As Programs},
 journal = {ACM Trans. Program. Lang. Syst.},
 issue_date = {Jan. 1985},
 volume = {7},
 number = {1},
 month = jan,
 year = {1985},
 issn = {0164-0925},
 pages = {113--136},
 numpages = {24},
 SKIPurl = {http://doi.acm.org/10.1145/2363.2528},
 doi = {10.1145/2363.2528},
 acmid = {2528},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@phdthesis{Bates1979,
 author = {Bates, Joseph Louis},
 title = {A Logic for Correct Program Development},
 year = {1979},
 note = {AAI8003896},
 school = {Cornell University},
 address = {Ithaca, NY, USA},
} 

@phdthesis{krafft1981,
  title={AVID: a system for the interactive development of verifiably correct programs},
  author={Krafft, Dean B},
  year={1981},
  school={Cornell University}
}

@article{Wirth1971,
 author = {Wirth, Niklaus},
 title = {Program Development by Stepwise Refinement},
 journal = {Commun. ACM},
 issue_date = {April 1971},
 volume = {14},
 number = {4},
 month = apr,
 year = {1971},
 issn = {0001-0782},
 pages = {221--227},
 numpages = {7},
 SKIPurl = {http://doi.acm.org/10.1145/362575.362577},
 doi = {10.1145/362575.362577},
 acmid = {362577},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {education in programming, programming techniques, stepwise program construction},
}

@Article{back1988calculus,
author="Back, R. J. R.",
title="A calculus of refinements for program derivations",
journal="Acta Informatica",
year="1988",
month="Aug",
day="01",
volume="25",
number="6",
pages="593--624",
issn="1432-0525",
doi="10.1007/BF00291051",
SKIPurl="https://doi.org/10.1007/BF00291051"
}

@InProceedings{vonwright1994,
author="von Wright, J.",
SKIPeditor="Till, David",
title="Program Refinement by Theorem Prover",
booktitle="6th Refinement Workshop",
year="1994",
publisher="Springer",
address="London",
pages="121--150",
isbn="978-1-4471-3240-0",
doi="10.1007/978-1-4471-3240-0_7",
}

@InProceedings{Liu2011,
author="Liu, Zhiming
and Morisset, Charles
and Wang, Shuling",
SKIPeditor="Davies, Jim
and Silva, Leila
and Simao, Adenilso",
title="A Graph-Based Implementation for Mechanized Refinement Calculus of {OO} Programs",
booktitle="Formal Methods: Foundations and Applications",
year="2011",
publisher="Springer",
address="Berlin, Heidelberg",
pages="258--273",
isbn="978-3-642-19829-8",
doi="10.1007/978-3-642-19829-8_17",
}

@InProceedings{hemer2001,
author="Hemer, David
and Hayes, Ian
and Strooper, Paul",
SKIPeditor="Boulton, Richard J.
and Jackson, Paul B.",
title="Refinement Calculus for Logic Programming in Isabelle/HOL",
booktitle="Theorem Proving in Higher Order Logics",
year="2001",
publisher="Springer",
address="Berlin, Heidelberg",
pages="249--260",
isbn="978-3-540-44755-9",
doi="10.1007/3-540-44755-5_18",
}

@InProceedings{back1991,
author="Back, R. J. R.",
SKIPeditor="Morris, Joseph M.
and Shaw, Roger C.",
title="Refinement Diagrams",
booktitle="4th Refinement Workshop",
year="1991",
publisher="Springer",
address="London",
pages="125--137",
isbn="978-1-4471-3756-6",
doi="10.1007/978-1-4471-3756-6_7",
}

@techreport{Lynch1994,
 author = {Lynch, N. and Vaandrager, F.},
 title = {FORWARD AND BACKWARD SIMULATIONS PART I: UNTIMED SYSTEMS (Replaces TM-486)},
 year = {1994},
 source = {http://www.ncstrl.org:8900/ncstrl/servlet/search?formname=detail\&id=oai%3Ancstrlh%3Amitai%3AMIT-LCS%2F%2FMIT%2FLCS%2FTM-486b},
 publisher = {Massachusetts Institute of Technology},
 address = {Cambridge, MA, USA},
} 

@techreport{leroy2012,
  TITLE = {{The CompCert Memory Model, Version 2}},
  AUTHOR = {Leroy, Xavier and Appel, Andrew W. and Blazy, Sandrine and Stewart, Gordon},
  URL = {https://hal.inria.fr/hal-00703441},
  TYPE = {Research Report},
  NUMBER = {RR-7987},
  PAGES = {26},
  INSTITUTION = {{INRIA}},
  YEAR = {2012},
  MONTH = Jun,
  KEYWORDS = {Memory models ; formal semantics ; verified compilation ; CompCert},
  PDF = {https://hal.inria.fr/hal-00703441/file/RR-7987.pdf},
  HAL_ID = {hal-00703441},
  HAL_VERSION = {v1},
}

@misc{leroy-mem-2010,
  author={{CompCert Development Team}},
  title={Merge of the newmem and newextcalls branches},
  url={http://github.com/AbsInt/CompCert/commit/a74f6b45d72834b5b8417297017bd81424123d98},
  year={2010},
  accessed={July 5th, 2019}
}

@inproceedings{rand2017,
  author    = {Robert Rand and
               Jennifer Paykin and
               Steve Zdancewic},
  title     = {{QWIRE} Practice: Formal Verification of Quantum Circuits in Coq},
  booktitle = {Proceedings 14th International Conference on Quantum Physics and Logic,
               {QPL} 2017, Nijmegen, The Netherlands, 3-7 July 2017.},
  pages     = {119--132},
  year      = {2017},
  SKIPurl       = {https://doi.org/10.4204/EPTCS.266.8},
  doi       = {10.4204/EPTCS.266.8},
  timestamp = {Wed, 29 May 2019 12:01:02 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/corr/abs-1803-00699},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@article{bahr2015,
  author    = {Patrick Bahr and
               Graham Hutton},
  title     = {Calculating correct compilers},
  journal   = {J. Funct. Program.},
  volume    = {25},
  year      = {2015},
  SKIPurl       = {https://doi.org/10.1017/S0956796815000180},
  doi       = {10.1017/S0956796815000180},
  timestamp = {Wed, 14 Nov 2018 10:38:38 +0100},
  biburl    = {https://dblp.org/rec/bib/journals/jfp/BahrH15},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@misc{barret-agda,
  author={Barret, Colin},
  title={Twitter Response},
  url={http://twitter.com/cbarrett/status/1059888137026068482},
  year={2018},
  accessed={July 5th, 2019}
}

@misc{coq-plugins,
  author={{Coq Development Team}},
  title={How to write plugins in {Coq}},
  url={http://github.com/coq/coq/tree/master/doc/plugin_tutorial},
  year={2018-2019},
  accessed={July 5th, 2019}
}

@inproceedings{zhao2012,
  author    = {Jianzhou Zhao and
               Santosh Nagarakatte and
               Milo M. K. Martin and
               Steve Zdancewic},
  title     = {Formalizing the {LLVM} intermediate representation for verified program
               transformations},
  booktitle = {Proceedings of the 39th {ACM} {SIGPLAN-SIGACT} Symposium on Principles
               of Programming Languages, {POPL} 2012, Philadelphia, Pennsylvania,
               USA, January 22-28, 2012},
  pages     = {427--440},
  year      = {2012},
  doi       = {10.1145/2103656.2103709},
  timestamp = {Tue, 06 Nov 2018 11:07:43 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/popl/ZhaoNMZ12},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@inproceedings{Morrisett2012,
 author = {Morrisett, Greg and Tan, Gang and Tassarotti, Joseph and Tristan, Jean-Baptiste and Gan, Edward},
 title = {{RockSalt}: Better, Faster, Stronger {SFI} for the {x86}},
 booktitle = {Proceedings of the 33rd ACM SIGPLAN Conference on Programming Language Design and Implementation},
 series = {PLDI '12},
 year = {2012},
 isbn = {978-1-4503-1205-9},
 location = {Beijing, China},
 pages = {395--404},
 numpages = {10},
 SKIPurl = {http://doi.acm.org/10.1145/2254064.2254111},
 doi = {10.1145/2254064.2254111},
 acmid = {2254111},
 publisher = {ACM},
 address = {New York, NY, USA},
}

@inproceedings{Casinghino2014,
  author    = {Chris Casinghino and
               Vilhelm Sj{\"{o}}berg and
               Stephanie Weirich},
  title     = {Combining proofs and programs in a dependently typed language},
  booktitle = {The 41st Annual {ACM} {SIGPLAN-SIGACT} Symposium on Principles of
               Programming Languages, {POPL} '14, San Diego, CA, USA, January 20-21,
               2014},
  pages     = {33--46},
  year      = {2014},
  SKIPurl       = {https://doi.org/10.1145/2535838.2535883},
  doi       = {10.1145/2535838.2535883},
  timestamp = {Tue, 06 Nov 2018 11:07:43 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/popl/CasinghinoSW14},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@article{Appel2003,
  author    = {Andrew W. Appel and
               Neophytos G. Michael and
               Aaron Stump and
               Roberto Virga},
  title     = {A Trustworthy Proof Checker},
  journal   = {J. Autom. Reasoning},
  volume    = {31},
  number    = {3-4},
  pages     = {231--260},
  year      = {2003},
  SKIPurl       = {https://doi.org/10.1023/B:JARS.0000021013.61329.58},
  doi       = {10.1023/B:JARS.0000021013.61329.58},
  timestamp = {Sat, 20 May 2017 00:22:31 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/jar/AppelMSV03},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@article{shah2005,
  author    = {Nimish Shah},
  title     = {"Rippling: Meta-Level Guidance for Mathematical Reasoning, " by Alan
               Bundy, David Basin, Dieter Hutter, and Andrew Ireland, Cambridge University
               Press, 2005},
  journal   = {J. Autom. Reasoning},
  volume    = {35},
  number    = {4},
  pages     = {429--431},
  year      = {2005},
  SKIPurl       = {https://doi.org/10.1007/s10817-006-9027-0},
  doi       = {10.1007/s10817-006-9027-0},
  timestamp = {Sat, 20 May 2017 00:22:31 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/jar/Shah05},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@article{ireland1996,
  author    = {Andrew Ireland},
  title     = {Productive Use of Failure in Inductive Proof},
  journal   = {J. Autom. Reasoning},
  volume    = {16},
  number    = {1-2},
  pages     = {79--111},
  year      = {1996},
  SKIPurl       = {https://doi.org/10.1007/BF00244460},
  doi       = {10.1007/BF00244460},
  timestamp = {Sat, 20 May 2017 00:22:31 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/jar/Ireland96},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@InProceedings{Sozeau2010,
author="Sozeau, Matthieu",
SKIPeditor="Kaufmann, Matt
and Paulson, Lawrence C.",
title="Equations: A Dependent Pattern-Matching Compiler",
booktitle="Interactive Theorem Proving",
year="2010",
publisher="Springer",
address="Berlin, Heidelberg",
pages="419--434",
isbn="978-3-642-14052-5",
doi="10.1007/978-3-642-14052-5_29",
}

@article{Timany2017,
  author    = {Amin Timany and
               Matthieu Sozeau},
  title     = {Consistency of the Predicative Calculus of Cumulative Inductive Constructions
               ({pCuIC})},
  journal   = {CoRR},
  volume    = {abs/1710.03912},
  year      = {2017},
  archivePrefix = {arXiv},
  eprint    = {1710.03912},
  SKIPurl       = {http://arxiv.org/abs/1710.03912},
}

@article{Abadi1991,
title = "The existence of refinement mappings",
journal = "Theoretical Computer Science",
volume = "82",
number = "2",
pages = "253--284",
year = "1991",
issn = "0304-3975",
doi = "10.1016/0304-3975(91)90224-P",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/030439759190224P",
author = "Martin Abadi and Leslie Lamport",
}

@article{Capretta2005,
  title = {General Recursion via Coinductive Types},
  author = {Capretta, Venanzio},
  SKIPurl = {https://lmcs.episciences.org/2265},
  doi = {10.2168/LMCS-1(2:1)2005},
  journal = {Logical Methods in Computer Science},
  volume = {{Volume 1, Issue 2}},
  year = {2005},
  month = Jul,
}

@article{oconnor2016b,
  author    = {Liam O'Connor and
               Christine Rizkallah and
               Zilin Chen and
               Sidney Amani and
               Japheth Lim and
               Yutaka Nagashima and
               Thomas Sewell and
               Alex Hixon and
               Gabriele Keller and
               Toby C. Murray and
               Gerwin Klein},
  title     = {{COGENT:} Certified Compilation for a Functional Systems Language},
  journal   = {CoRR},
  volume    = {abs/1601.05520},
  year      = {2016},
  SKIPurl       = {http://arxiv.org/abs/1601.05520},
  archivePrefix = {arXiv},
  eprint    = {1601.05520},
  timestamp = {Mon, 13 Aug 2018 16:45:57 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/corr/OConnorRCALNSHK16},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@InProceedings{Altenkirch1994,
author="Altenkirch, Thorsten",
SKIPeditor="Barendregt, Henk
and Nipkow, Tobias",
title="Proving strong normalization of {CC} by modifying realizability semantics",
booktitle="Types for Proofs and Programs",
year="1994",
publisher="Springer",
address="Berlin, Heidelberg",
pages="3--18",
isbn="978-3-540-48440-0",
doi="10.1007/3-540-58085-9_70",
}

@article{Podkopaev2019,
  author    = {Anton Podkopaev and
               Ori Lahav and
               Viktor Vafeiadis},
  title     = {Bridging the gap between programming languages and hardware weak memory
               models},
  journal   = {{PACMPL}},
  volume    = {3},
  number    = {{POPL}},
  pages     = {69:1--69:31},
  year      = {2019},
  doi       = {10.1145/3290382},
  timestamp = {Fri, 10 May 2019 11:01:57 +0200},
  biburl    = {https://dblp.org/rec/bib/journals/pacmpl/PodkopaevLV19},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

@misc{harpersonal,
  author = {Harper, Robert and Crary, Karl},
  year = {2019},
  howpublished = {Personal communication}
}

@misc{personappel,
  author = {Appel, Andrew W},
  year = {2017},
  howpublished = {Personal communication}
}

@misc{piercenal,
  author = {Pierce, Benjamin C},
  year = {2017},
  howpublished = {Personal communication}
}

@misc{piercenal2,
  author = {Pierce, Benjamin C},
  year = {2019},
  howpublished = {Personal communication}
}

@incollection{DeBruijn1994,
title = "A Survey of the Project {Automath}",
editor = "R.P. Nederpelt and J.H. Geuvers and R.C. de Vrijer",
series = "Studies in Logic and the Foundations of Mathematics",
publisher = "Elsevier",
volume = "133",
pages = "141 - 161",
year = "1994",
booktitle = "Selected Papers on Automath",
issn = "0049-237X",
doi = "10.1016/S0049-237X(08)70203-9",
SKIPurl = "http://www.sciencedirect.com/science/article/pii/S0049237X08702039",
author = "de Bruijn, N. G.",
}

@InProceedings{DeBruijn1970,
author="de Bruijn, N. G.",
SKIPeditor="Laudet, M.
and Lacombe, D.
and Nolin, L.
and Sch{\"u}tzenberger, M.",
title="The mathematical language {Automath}, its usage, and some of its extensions",
booktitle="Symposium on Automatic Demonstration",
year="1970",
publisher="Springer",
address="Berlin, Heidelberg",
pages="29--61",
isbn="978-3-540-36262-3",
doi="10.1007/BFb0060623",
}

@Article{Goedel1930,
author="G{\"o}del, Kurt",
title="Die Vollst{\"a}ndigkeit der Axiome des logischen Funktionenkalk{\"u}ls",
journal="Monatshefte f{\"u}r Mathematik und Physik",
year="1930",
month="Dec",
day="01",
volume="37",
number="1",
pages="349--360",
issn="1436-5081",
doi="10.1007/BF01696781",
SKIPurl="https://doi.org/10.1007/BF01696781"
}

@InProceedings{Leino2010,
author="Leino, K. Rustan M.",
SKIPeditor="Clarke, Edmund M.
and Voronkov, Andrei",
title="Dafny: An Automatic Program Verifier for Functional Correctness",
booktitle="Logic for Programming, Artificial Intelligence, and Reasoning",
year="2010",
publisher="Springer",
address="Berlin, Heidelberg",
pages="348--370",
isbn="978-3-642-17511-4",
doi="10.1007/978-3-642-17511-4_20",
}

@book{Sangiorgi2011,
 author = {Sangiorgi, Davide},
 title = {Introduction to Bisimulation and Coinduction},
 year = {2011},
 isbn = {1107003636, 9781107003637},
 publisher = {Cambridge University Press},
 address = {New York, NY, USA},
 doi = {10.1017/CBO9780511777110},
}

@InProceedings{Komendantskaya2012b,
author="Komendantskaya, Ekaterina
and Lichota, Kacper",
SKIPeditor="Villa, Alessandro E. P.
and Duch, W{\l}odzis{\l}aw
and {\'E}rdi, P{\'e}ter
and Masulli, Francesco
and Palm, G{\"u}nther",
title="Neural Networks for Proof-Pattern Recognition",
booktitle="Artificial Neural Networks and Machine Learning -- ICANN 2012",
year="2012",
publisher="Springer",
address="Berlin, Heidelberg",
pages="427--434",
isbn="978-3-642-33266-1",
doi="10.1007/978-3-642-33266-1_53",
}