Stav dette: Modular specification and verification of object-oriented programs / Peter Müller.