The Correctness-by-Construction Approach to Programming - Derrick G. Kourie, Bruce W. Watson (Springer)