John Harrison Formalizing Dijkstra. 171-188 1998 conf/tphol/1998 TPHOLs db/conf/tphol/tphol98.html#Harrison98a http://dx.doi.org/10.1007/BFb0055136