Set theory for verification: I. From foundations to functions (1993)

by Lawrence C Paulson
Venue:Journal of Automated Reasoning