C. A. R. Hoare Proof of Correctness of Data Representations. Acta Inf. 1 1972 271-281 db/journals/acta/acta1.html#Hoare72 http://dx.doi.org/10.1007/BF00289507