of object-oriented specifications with coinductive correctness proofs (1997)

by Behaviour-refinement