Behavioral Subtyping, Specification Inheritance, and Modular Reasoning

Verification of a dynamically dispatched method call, E.m(), seems to depend on Es dynamic type. To avoid case analysis and allow incremental development, object-oriented program verification uses ...