Behaviour-refinement of object-oriented specifications with coinductive correctness proofs (1997)

by B Jacobs