Ed Brinksma Specification Modules in LOTOS. 101-115 1989 conf/forte/1989 FORTE db/conf/forte/forte1989.html#Brinksma89