C.A.: Elements of style: analyzing a software design feature with a counterexample detector (1996)

by D Jackson, Damon