Maarten M. Fokkinga A Correctness Proof of Sorting by Means of Formal Procedures. 263-269 1987 9 Sci. Comput. Program. 3 db/journals/scp/scp9.html#Fokkinga87