Conjoining specifications (1995)

by M Abadi, L Lamport
Venue:ACM Transactions on Programming Languages and Systems