Certified  
Programming  
with  
Dependent  
Types  
Certified  
Programming  
with  
Dependent  
Types  
A Pragmatic Introduction to the Coq Proof Assistant  
Adam Chlipala  
The MIT Press  
Cambridge, Massachusetts  
London, England