The PVS proof checker: A reference manual (beta release (1993)

by R E Shankar, S Owre, J M Rushby