Derrick G. Kourie

The Correctness-by-Construction Approach to Programming