Singlethreaded formal processor models: Enabling proof and high-speed execution (1999)

by David Hardin, David Greve, Matthew Wilding, John Cowles