LCF-LSM: A system for specifying and verifying hardware (1983)

by M J C Gordon