A Typed Lambda-Calculus for Establishing Trust in Probabilistic Programs