Shaner, Leavens, Naumann, 2007. Modular verification of higher-order methods with mandatory calls specified by model programs, in: . ACM Press.. https://doi.org/10.1145/1297027.1297053