Sten Agerholm Jacob Frost Towards an Integrated CASE and Theorem Proving Tool for VDM-SL. 278-297 1997 conf/fm/1997 FME db/conf/fm/fme1997.html#AgerholmF97 http://dx.doi.org/10.1007/3-540-63533-5_15