Proving a Computer Correct (1983)

by M J C Gordon