Stefan Sokolowski Axioms for Total Correctness. 61-71 1977 9 Acta Inf. db/journals/acta/acta9.html#Sokolowski77