A verified compiler for a verified microprocessor (1989)

by Jeffrey J Joyce