A statically verifiable programming model for concurrent object-oriented programs door Bas Jacobs