Hoare (1972)
Hoare C.A.R. (1972)
Proof of correctness of data representation
Acta Informatica 1, pp. 271-281