How the design of JML accommodates both runtime assertion checking and formal verification

From MaRDI portal
Publication:1776585