Program correctness: on inductive assertion methods | IEEE Journals & Magazine | IEEE Xplore