Irem Aktug Mads Dam Dilian Gurov Provably Correct Runtime Monitoring. 262-277 2008 FM http://dx.doi.org/10.1007/978-3-540-68237-0_19 conf/fm/2008 db/conf/fm/fm2008.html#AktugDG08