David A. Carrington Ian J. Hayes Ray Nickson Geoffrey Watson Jim Welsh A Program Refinement Tool. 97-124 1998 10 Formal Asp. Comput. 2 db/journals/fac/fac10.html#CarringtonHNWW98