The hol-voss system: Model-checking inside a generalpurpose theorem prover (1993)

by J J Joyce, C Seger
Venue:Lecture Notes in Computer Science, 780 : Higher Order Logic Theorem Proving and its Applications: 6th International Workshop, HUG'93