[POCL'24] Proving capability safety in the presence of indirect sentries | ACM SIGPLAN | Podwise