Michel Bidoit Rolf Hennicker Proving the Correctness of Behavioural Implementations. 152-168 1995 conf/amast/1995 AMAST db/conf/amast/amast95.html#BidoitH95