Maarten H. van Emden Verification Conditions as Programs. 99-119 1976 ICALP db/conf/icalp/icalp76.html#Emden76