The authors would like to acknowledge the helpful comments of the many people who have read this paper, including Martín Abadi, Atul Adya, Kavita Bala, Phil Bogle, Miguel Castro, Steve Garland, Robert Grimm, Butler Lampson, Roger Needham, Matt Stillerman, and the anonymous reviewers.
Andrew C. Myers, Barbara Liskov