Soundness of Hoare's Logic: an Automatic Proof Using LCF (1987)

by S Sokolowski