"Remarks on the impact of program verification on language design."

Ralph L. London (1976)
a service of  Schloss Dagstuhl - Leibniz Center for Informatics