A general proof rule for procedures in predicate transformer semantics
scientific article; zbMATH DE number 3870576