David Gries Monotonicity in Calculational Proofs. 79-85 http://link.springer.de/link/service/series/0558/bibs/1710/17100079.htm 1999 conf/birthday/1999langmaack Correct System Design db/conf/birthday/langmaack1999.html#Gries99