Code Generation from Specifications in Higher-Order Logic
Interactive Theorem Proving and Program Development