Isabelle: A Generic Theorem Prover. LNCS 828 (1994)

by L C Paulson