J. Strother Moore An ACL2 Proof of Write Invalidate Cache Coherence. 29-38 1998 conf/cav/1998 CAV db/conf/cav/cav98.html#Moore98 http://dx.doi.org/10.1007/BFb0028728