Notational definition and top-down refinement for interactive proof development systems (1988)

by Timothy G Griffin