A Theory of Program Refinement (1998)

by Ewen W. K. C. Denney