W. J. Cullyer High Integrity Computing. 1-35 1988 conf/ftrtft/1988 FTRTFT db/conf/ftrtft/ftrtft1988.html#Cullyer88