Christian Engel Reiner Hähnle Generating Unit Tests from Formal Proofs. 169-188 2007 conf/tap/2007 TAP http://dx.doi.org/10.1007/978-3-540-73770-4_10 db/conf/tap/tap2007.html#EngelH07