Lech Banachowski On proving program correctness by means of stepwise refinement method. 27-44 1980 conf/lop/1980 Logic of Programs db/conf/lop/lop1980.html#Banachowski80