Inadequacy of program testing
Inadequacy of program testing 2 (PDF)
Diller's language (PDF)
Program proving formulas (PDF)
Axiom of assignment (PDF)
Auxiliary proof rules (PDF)
A proving subtlety (PDF)