Christoph Lüth Haykal Tej Kolyang Bernd Krieg-Brückner TAS and IsaWin: Tools for Transformational Program Development and Theorem Proving. 239-243 1999 conf/fase/1999 FASE db/conf/fase/fase99.html#LuthTKK99