R. A. Nelson
IBM Thomas J. Watson Research Center, Yorktown Heights, New York
Guarded commands, nondeterminacy and formal derivation of programs
Communications of the ACM