M Abadi, L Lamport - … Workshop, Mook, The Netherlands, May 29 …, 1990 - books.google.com
A rigorous modular specification method requires a proof rule asserting that if each
component behaves correctly in isolation, then it behaves correctly in concert with other …