Timothy A. Budd Dana Angluin Two Notions of Correctness and Their Relation to Testing. 31-45 1982 18 Acta Inf. db/journals/acta/acta18.html#BuddA82