Proving a Computer Correct using LCF–LSM Hardware Verification System ». Rapport technique 42 (1983)

by M GORDON