selected publications chapter The production cell: A verified real-time system. Springer eBooks. 208-227. 1996