Multilevel structured program designs and correctness proving
scientific article; zbMATH DE number 859584