Aaron R. Bradley Zohar Manna Property-directed incremental invariant generation. 379-405 2008 20 Formal Asp. Comput. 4-5 http://dx.doi.org/10.1007/s00165-008-0080-9 db/journals/fac/fac20.html#BradleyM08