A weakest precondition semantics for refinement of object-oriented programs (2000)

by Ana Cavalcanti, David Naumann
Venue:IEEE Transactions on Software Engineering