https://9dok.net/document/yng04g8k-igloo-soundly-linking-compositional-refinement-separation-distributed-verification.html