1. G Birtwistle and B Graham, “Verifying SECD in HOL”, pp.129–177 in Formal Methods for VLSI Design, ed. J Staunstrup, North-Holland, (1990).
2. A Cohn and M Gordon, “A Mechanised Proof of Correctness of a Simple Counter”, pp.65–96 in Theoretical Foundations for VLSI Design, ed. K McEvoy and J V Tucker, Cambridge University Press, (1990).
3. A Cohn, “A Proof of Correctness of the VIPER Microprocessor: the First Levels”, pp.27–72 in VLSI Specification, Verification and Synthesis, ed. G Birtwistle and P A Subrahmanyam, Kluwer Academic Publishers, (1987).
4. W J Cullyer, “Implementing Safety Critical Systems: the Viper Microprocessor”, pp.1–26 in VLSI Specification, Verification, and Synthesis, ed. G Birtwistle and P A Subrahmanyam, Kluwer Academic Publishers, (1987).
5. W J Cullyer, “Application of Formal Methods to the VIPER Microprocessor”, IEE Proceedings, 134 E, 3, pp.133–141 (May 1987).