Eric C. R. Hehner Specifications, Programs, and Total Correctness. 191-205 1999 34 Sci. Comput. Program. 3 db/journals/scp/scp34.html#Hehner99