Jason Hickey Nancy A. Lynch Robbert van Renesse Specifications and Proofs for Ensemble Layers. 119-133 1999 conf/tacas/1999 TACAS http://link.springer.de/link/service/series/0558/bibs/1579/15790119.htm db/conf/tacas/tacas99.html#HickeyLR99