David Guaspari Carla Marceau Wolfgang Polak Formal Verification of Ada Programs. 104-141 1992 conf/larch/1992 Larch db/conf/larch/larch1992.html#GuaspariMP92