The original conference paper and slides are also available.

Appears in IEEE Transactions on Software Engineering, Volume 24, Number 9.
September, 1998.
Pages 709–720.

A specification language used in the context of an effective theorem prover can provide novel features that enhance precision and expressiveness. In particular, typechecking for the language can exploit the services of the theorem prover. We describe a feature called ``predicate subtyping'' that uses this capability and illustrate its utility as mechanized in PVS.

@article{Rushby98:TSE,
    AUTHOR = {John Rushby and Sam Owre and {N.} Shankar},
    TITLE = {Subtypes for Specifications: Predicate Subtyping in {PVS}},
    JOURNAL = {{IEEE} Transactions on Software Engineering},
    VOLUME = {24},
    NUMBER = {9},
    YEAR = {1998},
    PAGES = {709--720},
    MONTH = {sep},
    URL = {http://www.csl.sri.com/papers/tse98/}
}

• tse98.dvi
• tse98.pdf
• tse98.ps