Ramesh Bharadwaj Constance L. Heitmeyer Model Checking Complete Requirements Specifications Using Abstraction. 37-68 1999 6 Autom. Softw. Eng. 1 db/journals/ase/ase6.html#BharadwajH99