Andreas Podelski Andrey Rybalchenko Transition Invariants. 32-41 2004 conf/lics/2004 LICS http://doi.ieeecomputersociety.org/10.1109/LICS.2004.1319598 db/conf/lics/lics2004.html#PodelskiR04