link to Hoare CSP paper