Robert Dewar Ada 2005 & high integrity systems. 43 2006 SIGAda http://doi.acm.org/10.1145/1185642.1185650 conf/sigada/2006 db/conf/sigada/sigada2006.html#Dewar06