Emil Sekerinski Exploring Tabular Verification and Refinement. 215-236 2003 15 Formal Asp. Comput. 2-3 http://dx.doi.org/10.1007/s00165-003-0010-9 db/journals/fac/fac15.html#Sekerinski03