Verifying modular programs in HOL (1994)

by J von Wright