Abstract
A proof rule for the procedure call is proposed that has the property
that the precondition it defines is the weakest precondition that can be
inferred solely from the procedure's specification. Thus the rule enforces
exactly the abstraction introduced by the specification. Gries's proof rule
for the procedure call is shown not to have
... read more
