Paul Curzon Deriving Correctness Properties of Compiled Code. 327-346 1992 conf/tphol/1992 TPHOLs db/conf/tphol/tphol92.html#Curzon92