Donald I. Good Richard M. Cohen James Keeton-Williams Principles of Proving Programs Correct in Gypsy. 42-52 1979 POPL db/conf/popl/popl79.html#GoodC79 POPL/00001696.PDF db/conf/popl/GoodC79.html