Text this: Proving programs correct / Robert B. Anderson.