A statically verifiable programming model for concurrent object-oriented programs by Bas Jacobs