Safety and Consistency of Mutable Attributes Using Quotas: A Formal Analysis | IEEE Conference Publication | IEEE Xplore