"A Machine-Checked Proof for a Translation of Event-B Machines to JML."

Néstor Cataño, Camilo Rueda, Tim Wahls (2013)
a service of Schloss Dagstuhl - Leibniz Center for Informatics