Machine checked proofs of the design of a fault-tolerant circuit (1992)

by William R Bevier, William D Young
Venue:Formal Aspects of Computing