Abstract datatypes in PVS (1997)

by S Owre, N Shankar