Automatic Program Verification III: A Methodology for Verifying Programs. AIM-256

purl.stanford.edu/zx345dy4371