Wolfgang Reif, Gerhard Schellhorn, Kurt Stenzel: Proving System Correctness with KIV. TAPSOFT 1997: 859-862