J. Boender, “Formal verification of a theory of packages”, ECEASST, vol. 48, Apr. 2013.