Static Verification Of Data-Consistency Properties. door Nicholas A. Kidd