1. Ada Europe: Ada Reference Manual - Language and Standard Libraries, Chapter A.18.3 The Generic Package Containers. Doubly_Linked_Lists Norm ISO/IEC 8652:2012(E) (2012).
http://www.adaic.org/resources/add_content/standards/12rm/html/RM-TTL.html
2. AdaCore: SPARK verification gallery.
https://github.com/AdaCore/spark2014/tree/master/testsuite/gnatprove/tests
3. Baudin, P., Filliâtre, J.C., Hubert, T., Marché, C., Monate, B., Moy, Y., Prevosto, V.: ACSL: ANSI C Specification Language (preliminary design V1.2), preliminary edition, May 2008
4. Calcagno, C., Distefano, D., O’Hearn, P.W., Yang, H.: Compositional shape analysis by means of bi-abduction. J. ACM 58(6), 26:1–26:66 (2011)
5. Cauderlier, R., Sighireanu, M.: A verified implementation of the bounded list container. In: TACAS 2018 (2018). Figshare.
https://doi.org/10.6084/m9.figshare.5919145.v1