Tobias Runge, Thomas Thüm, Loek Cleophas, Ina Schaefer, Bruce W. Watson: Comparing Correctness-by-Construction with Post-Hoc Verification - A Qualitative User Study. FM Workshops (2) 2019: 388-405