Jordi Farrés-Casals Proving Correctness wrt Specifications with Hidden Parts. 25-39 1990 conf/alp/1990 ALP db/conf/alp/alp90.html#Farres-Casals90 http://dx.doi.org/10.1007/3-540-53162-9_28