Ownership types were devised nearly 15 years ago to provide a stronger notion of protection
to object-oriented programming languages. Rather than simply protecting the fields of an …

Object-oriented programming languages allow inter-object aliasing. Although necessary to
construct linked data structures and networks of interacting objects, aliasing is problematic in …

Many state-based specification languages, including the Java Modeling Language (JML),
contain at their core specification constructs familiar to most undergraduates: eg, assertions …

We introduce Flux, which shows how logical refinements can work hand in glove with Rust's
ownership mechanisms to yield ergonomic type-based verification of low-level pointer …

In the last chapter, we explained how the functional behavior of methods can be specified
and verified. Specification of functional method behavior describes the result value and …

JML is a notation for formally specifying the behavior and interfaces of Java [Arnold-Gosling-
Holmes00][Gosling-etal00] classes and methods. The goal of this reference manual is to …

Graph-based intermediate representations (IRs) are widely used for powerful compiler
optimizations, either interprocedurally in pure functional languages, or intraprocedurally in …

Scale-free geometry in OO programs Page 1 COMMUNICATIONS OF THE ACM May 2005/Vol.
48, No. 5 99 Though conventional OO design suggests programs should be built from many …

Ownership types provide a statically enforceable notion of object-level encapsulation. We
extend ownership types with computational effects to support reasoning about object …

One of the primary challenges in building and evolving large object-oriented systems is
understanding aliasing between objects. Unexpected aliasing can lead to broken invariants …