Gammelgaard, A. “Reuse of Invariants in Proofs of Implementation”. DAIMI Report Series, vol. 20, no. 360, July 1991, doi:10.7146/dpb.v20i360.6591.