DDD-FM9001: Derivation of a verified microprocessor; an exercise in integrating verification with formal derivation (1993)

by S D Johnson
Venue:Proc. IFIP Conf. on Correct Hardware Design and Verification Methods. Lecture Notes in Computer Science 683