Xiaoshan Li Antonio Cau Ben C. Moszkowski Nick Coleman Hussein Zedan Proving the correctness of the interlock mechanism in processor design. 5-22 1997 conf/charme/1997 CHARME db/conf/charme/charme1997.html#LiCMCZ97