Formal verification of AI software - Rushby, John, (National Aeronautics and Space Administration, Langley Research Center,, 1989)