Thomas P. Murtagh Redundant Proofs of Non-Interference in Levin-Gries CSP Program Proofs. 145-156 1987 24 Acta Inf. 2 db/journals/acta/acta24.html#Murtagh87