A note on program verification (1982)

by P Aczel