Formal verification of low-level code in a model-based refinement process. - Nils Erik Berg (2019)