Wolfgang Schreiner The RISC ProofNavigator: a proving assistant for program verification in the classroom. 277-291 2009 21 Formal Asp. Comput. 3 http://dx.doi.org/10.1007/s00165-008-0069-4 db/journals/fac/fac21.html#Schreiner09