Daniel Jackson Somesh Jha Craig Damon Isomorph-Free Model Enumeration: A New Method for Checking Relational Specifications. 302-343 1998 20 ACM Trans. Program. Lang. Syst. 2 db/journals/toplas/toplas20.html#JacksonJD98 http://doi.acm.org/10.1145/276393.276396