C. A. R. Hoare Michael J. C. Gordon Partial Correctness of C-MOS Switching Circuits: An Exercise in Applied Logic 28-36 conf/lics/LICS3 1988 LICS db/conf/lics/lics88.html#HoareG88