<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="static/style.xsl"?><OAI-PMH xmlns="http://www.openarchives.org/OAI/2.0/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/ http://www.openarchives.org/OAI/2.0/OAI-PMH.xsd"><responseDate>2026-06-08T03:46:49Z</responseDate><request verb="GetRecord" identifier="oai:docta.ucm.es:20.500.14352/93186" metadataPrefix="mods">https://docta.ucm.es/rest/oai/request</request><GetRecord><record><header><identifier>oai:docta.ucm.es:20.500.14352/93186</identifier><datestamp>2025-03-18T13:28:31Z</datestamp><setSpec>com_20.500.14352_14</setSpec><setSpec>col_20.500.14352_15</setSpec></header><metadata><mods:mods xmlns:mods="http://www.loc.gov/mods/v3" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:doc="http://www.lyncode.com/xoai" xsi:schemaLocation="http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-1.xsd">
   <mods:name>
      <mods:namePart>Blázquez, Jorge</mods:namePart>
   </mods:name>
   <mods:name>
      <mods:namePart>Montenegro Montes, Manuel</mods:namePart>
   </mods:name>
   <mods:name>
      <mods:namePart>Segura Díaz, Clara María</mods:namePart>
   </mods:name>
   <mods:extension>
      <mods:dateAvailable encoding="iso8601">2024-01-15T16:46:08Z</mods:dateAvailable>
   </mods:extension>
   <mods:extension>
      <mods:dateAccessioned encoding="iso8601">2024-01-15T16:46:08Z</mods:dateAccessioned>
   </mods:extension>
   <mods:originInfo>
      <mods:dateIssued encoding="iso8601">2021-09-22</mods:dateIssued>
   </mods:originInfo>
   <mods:identifier type="uri">https://hdl.handle.net/20.500.14352/93186</mods:identifier>
   <mods:identifier type="officialurl">https://hdl.handle.net/11705/PROLE/2021/015</mods:identifier>
   <mods:identifier type="relatedurl">https://sistedes2021.spilab.es/prole/</mods:identifier>
   <mods:abstract>We address the verification of mutable, heap-allocated abstract data types (ADTs) in Dafny. In particular, we devise a generic verification methodology and apply it to the specification and implementation of linear collections such as stacks,
queues, deques, and lists with iterators. The layered approach presented in this paper allows us to progressively refine some aspects of the specification, such as iterator invalidation. We also introduce a stratified view of the footprint of an
instance (i.e. the set of memory locations owned by that instance), and identify the boilerplate conditions common to all operations of an ADT. We also show the usage of the resulting implementations by means of verified examples.</mods:abstract>
   <mods:language>
      <mods:languageTerm>eng</mods:languageTerm>
   </mods:language>
   <mods:accessCondition type="useAndReproduction">http://creativecommons.org/licenses/by-nc-nd/4.0/</mods:accessCondition>
   <mods:accessCondition type="useAndReproduction">open access</mods:accessCondition>
   <mods:accessCondition type="useAndReproduction">Attribution-NonCommercial-NoDerivatives 4.0 International</mods:accessCondition>
   <mods:titleInfo>
      <mods:title>Verification of mutable data structures in Dafny: methodological aspects</mods:title>
   </mods:titleInfo>
   <mods:genre>conference paper</mods:genre>
</mods:mods></metadata></record></GetRecord></OAI-PMH>