The semiautomatic generation of inductive assertions for proving program correctness (1974)

by Bernard Elspas
Venue:Interim Report Project 2686, Stanford Research Institute, Menlo Park