C. Ruby

Preliminary design of JML: a behavioral interface specification language for java

Albert L. Baker, Gary T. Leavens, A. L. Baker, 2006, SOEN.

JML: notations and tools supporting detailed design in Java

Gary T. Leavens, Erik Poll, Bart Jacobs, 2000 .

JML (poster session): notations and tools supporting detailed design in Java

Bart Jacobs, Gary T. Leavens, K. Rustan M. Leino, 2000, OOPSLA '00.

How the design of JML accommodates both runtime assertion checking and formal verification

Gary T. Leavens, David R. Cok, Yoonsik Cheon, 2003, Sci. Comput. Program..

JML: A Notation for Detailed Design

Albert L. Baker, Gary T. Leavens, A. L. Baker, 1999, Behavioral Specifications of Businesses and Systems.

How the Design of JML Accomodates Both Runtime Assertion Checking and Formal Verification

Gary T. Leavens, David R. Cok, Yoonsik Cheon, 2002, FMCO.

Modular subclass verification: safely creating correct subclasses without superclass code

Gary T. Leavens, Gary T. Leavens, Clyde Ruby, 2006 .