Ownership types were devised nearly 15 years ago to provide a stronger notion of protection
to object-oriented programming languages. Rather than simply protecting the fields of an …

A key challenge for concurrent programming is that side-effects (memory operations) in one
thread can affect the behavior of another thread. In this paper, we present a type system to …

A program verifier is a tool that allows developers to prove that their code satisfies its
specification for every possible input and every thread schedule. These lecture notes …

An important application of unique object references is safe and efficient message passing
in concurrent object-oriented programming. However, to prevent the ill effects of aliasing …

Verona is a concurrent object-oriented programming language that organises all the objects
in a program into a forest of isolated regions. Memory is managed locally for each region, so …

Reference immutability ensures that a reference is not used to modify the referenced object,
and enables the safe sharing of object structures. A pure method does not cause side-effects …

OpenJML is a tool for checking code and specifications of Java programs. We describe our
experience building the tool on the foundation of JML, OpenJDK and Eclipse, as well as on …

The Java language lacks the important notions of ownership (an object owns its
representation to prevent unwanted aliasing) and immutability (the division into mutable …

Ownership types enforce encapsulation in object-oriented programs by ensuring that objects
cannot be leaked beyond object (s) that own them. Existing ownership programming …

Ownership simplifies reasoning about object-oriented programs by controlling aliasing and
modifications of objects. Several type systems have been proposed to express and check …