Andreas Podelski Andrey Rybalchenko Transition Invariants. 32-41 2004 conf/lics/2004 LICS http://csdl.computer.org/comp/proceedings/lics/2004/2192/00/21920032abs.htm db/conf/lics/lics2004.html#PodelskiR04