Title: Proving a computer correct with the LCF-LSM hardware verification system
First published: 1983