Claus H. Correl Proving Programs Correct through Refinement. 121-132 1978 9 Acta Inf. db/journals/acta/acta9.html#Correl78