The Correctness-by-Construction Approach to Programming door Derrick G. Kourie & Bruce W. Watson