M ABADI, L LAMPORT - ACM Transactions on Programming …, 1993 - scholar.archive.org
A rigorous modular specification method requires a proof rule asserting that if each
component behaves correctly in isolation, then it behaves correctly in concert with other …