PVS: Combining specification, proof checking, and model checking (1996)

by S Owre, S Rajan, J M Rushby, N Shankar, M Srivas
Venue:In CAV ’96