Steven Mark German

• A program verifier that generates inductive assertions