Vangalur S. Alagar Greetha Ramanathan Functional Specification and Proof of Correctness for Time Dependent Behaviour of Reactive Systems. 253-283 1991 3 Formal Asp. Comput. 3 db/journals/fac/fac3.html#AlagarR91