Inductive invariant checking with partial negative application conditionsJohannes DyckEsauritoAvvisami
Automatic verification of behavior preservation at the transformation level for relational model transformationJohannes DyckEsauritoAvvisami
