Immutable specifications for more concise and precise verification - David, C. (2013)
10.1145/2048066.2048096