Automatic Deductive Verification with Invisible Invariants (2001)

by Amir Pnueli, Sitvanit Ruah, Lenore Zuck