AURA: a programming language for authorization and audit
Interactive programs in dependent type theory