Mitchell Wand A Characterization of Weakest Preconditions. 209-212 1977 15 J. Comput. Syst. Sci. 2 db/journals/jcss/jcss15.html#Wand77