Proving a Computer Correct in Higher-order Logic (1986)

by Jeff Joyce, G Graham Birtwistle, M Gordon