Gammelgaard, A. (1991) “Reuse of Invariants in Proofs of Implementation”, DAIMI Report Series, 20(360). doi: 10.7146/dpb.v20i360.6591.