Ewen Denney Bernd Fischer 0002 Johann Schumann Using Automated Theorem Provers to Certify Auto-generated Aerospace Software. 198-212 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=3097&spage=198 2004 conf/cade/2004 IJCAR db/conf/cade/ijcar2004.html#DenneyFS04