How the design of JML accommodates both runtime assertion checking and formal verification.

Gary T. Leavens Yoonsik Cheon Curtis Clifton Clyde Ruby David R. Cok How the design of JML accommodates both runtime assertion checking and formal verification. 185-208 2005 55 Sci. Comput. Program. 1-3 http://dx.doi.org/10.1016/j.scico.2004.05.015 db/journals/scp/scp55.html#LeavensCCRC05