Gerwin Klein Martin Wildmoser Verified Bytecode Subroutines. 363-398 2003 30 J. Autom. Reasoning 3-4 http://dx.doi.org/10.1023/A:1025095122199 db/journals/jar/jar30.html#KleinW03