Automatic Program Verification III: A Methodology for Verifying Programs. AIM-256.

purl.stanford.edu/zx345dy4371