Dominique Devriese Lars Birkedal Frank Piessens Reasoning about Object Capabilities with Logical Relations and Effect Parametricity. 147-162 2016 EuroS&P https://doi.org/10.1109/EuroSP.2016.22 conf/eurosp/2016 db/conf/eurosp/eurosp2016.html#DevrieseBP16