Robert E. Shostak Richard L. Schwartz P. M. Melliar-Smith STP: A Mechanized Logic for Specification and Verification. 32-49 1982 conf/cade/1982 CADE db/conf/cade/cade82.html#ShostakSM82 http://dx.doi.org/10.1007/BFb0000050