The refinement calculator: Proof support for program refinement (1997)

by M Butler, J Grundy, T L˚angbacka, R Rukˇs˙enas, J von Wright
Venue:Formal Methods Pacific’97