Reference. Proving the Correctness of Multiprocess Programs [lamport-1977]