nteractwe theorem proving with Cambridge LCF (1985)

by L PAULSON