Gregor von Bochmann Submodule Construction for Specifications with Input Assumptions and Output Guarantees. 17-33 2002 conf/forte/2002 FORTE http://link.springer.de/link/service/series/0558/bibs/2529/25290017.htm db/conf/forte/forte2002.html#Bochmann02