Maurice Clint C. A. R. Hoare Program Proving: Jumps and Functions Acta Inf. 1 1972 214-224 db/journals/acta/acta1.html#ClintH72