Robert J. Hall A Supermodel Framework Supporting Validated Upgrading of Reactive Systems. 121-155 2003 10 Autom. Softw. Eng. 2 http://dx.doi.org/10.1023/A:1022963912112 db/journals/ase/ase10.html#Hall03a