1952
3 works on record
Programming from specifications
1990
Mathematics of program construction
On the refinement calculus