"An ACL2 Proof of Write Invalidate Cache Coherence."

J. Strother Moore (1998)
a service of Schloss Dagstuhl - Leibniz Center for Informatics