Specifying and Verifying the Steam-Boiler Problem with SPIN.

Grégory Duval Thierry Cattel Specifying and Verifying the Steam-Boiler Problem with SPIN. 203-217 1995 conf/dagstuhl/1995fm Formal Methods for Industrial Applications db/conf/dagstuhl/fm1995.html#DuvalC95