Grigoris Antoniou The Verification of Modules. 223-244 1994 6 Formal Asp. Comput. 2 db/journals/fac/fac6.html#Antoniou94