Michael Schenke Transformational Design of Real-Time Systems. Part II: From Program Specifications to Programs. 67-96 1999 36 Acta Inf. 1 http://link.springer.de/link/service/journals/00236/bibs/9036001/90360067.htm db/journals/acta/acta36.html#Schenke99