Werner Damm Amir Pnueli Verifying out-of-order executions. 23-47 1997 conf/charme/1997 CHARME db/conf/charme/charme1997.html#DammP97