O. Travkin, H. Wehrheim, and G. Schellhorn, “Proving Linearizability of Multiset with Local Proof Obligations”, eceasst, vol. 53, Jan. 2013.