Object-oriented refinement and proof using behaviour functions (2000)

by T Clark
Venue:Proc. 3rd Workshop Rigorous Object-Oriented Methods