A functional correctness model of program verification | IEEE Journals & Magazine | IEEE Xplore