In order to prove that a specification holds … input program and find all program locations in … Formally, this constructs the product of the original … [ref]. … To prove that a program does not violate … the 'error' function and that it is fair …
Google-1
Google-2
Copyright clearance needed for quotation.