submission to TFP 2016 (draft, see hazelnut-popl17 for latest) - View it on GitHub