Abstract semantic differencing for numerical programs
An axiomatic basis for computer programming