selected publications chapter Provably Correct Systems. Lecture Notes in Computer Science. 288-335. 1994