Return to Article Details Reuse of Invariants in Proofs of Implementation Download Download PDF