Subtyping, Modular Specification, and Modular Verification for Applicative Object-Oriented Programs (1994)
by
Gary T. Leavens
,
William E. Weihl