C. Cordell Green Formality Helps Scalability and Robustness. 5 1996 28 ACM Comput. Surv. 4es db/journals/csur/csur28.html#Green96 http://doi.acm.org/10.1145/242224.242231