Paul Loewenstein Formal Verification of Counterflow Pipeline Architecture. 261-276 1995 conf/tphol/1995 TPHOLs db/conf/tphol/tphol95.html#Loewenstein95 http://dx.doi.org/10.1007/3-540-60275-5_70