How the Design of JML Accomodates Both Runtime Assertion Checking and Formal Verification.

Gary T. Leavens Yoonsik Cheon Curtis Clifton Clyde Ruby David R. Cok How the Design of JML Accomodates Both Runtime Assertion Checking and Formal Verification. 262-284 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=2852&spage=262 2002 conf/fmco/2002 FMCO db/conf/fmco/fmco2002.html#LeavensCCRC02