The ideal of program correctness Tony Hoare CAVSeattleAugust 2006.
Derivation of the HL7 RIM Ontology A Top-Down Methodology.