Some techniques for proving correctness of programs which alter data structures. Machine intelligence (1972)

by R M Burstall