Arjan J. Mooij Wieger Wesselink Incremental Verification of Owicki/Gries Proof Outlines Using PVS. 390-404 2005 conf/icfem/2005 ICFEM http://dx.doi.org/10.1007/11576280_27 db/conf/icfem/icfem2005.html#MooijW05