Dafny: An Automatic Program Verifier for Functional CorrectnessLeino, K. Rustan M.·2010·Lecture Notes in Computer ScienceDOI 10.1007/978-3-642-17511-4_20