Specification and verification using dependent types | IEEE Journals & Magazine | IEEE Xplore