Isabelle: A Generic Theorem Prover, volume 828 of LNCS (1994)

by Lawrence C Paulson