Safety via State Transition Language Plus Invariants.

Leo Marcus Telis Menas Safety via State Transition Language Plus Invariants. 71-77 1989 CSFW db/conf/csfw/csfw1989.html#MarcusM89