Subtyping, Modular Specification, and Modular Verification for Applicative Object-Oriented Programs (1994)

by Gary T. Leavens , William E. Weihl