Interactive Theorem Proving in Software Engineering by Florian Kammüller