Proving a computer correct in higher order logic (1986)

by Je Joyce, Graham Birtwistle, Mike Gordon