Michael I. Schwartzbach Static Correctness of Hierarchical Procedures. 177-201 1996 156 Theor. Comput. Sci. 1&2 db/journals/tcs/tcs156.html#Schwartzbach96 http://dx.doi.org/10.1016/0304-3975(95)00086-0