Wim H. Hesselink The Verified Incremental Design of a Distributed Spanning Tree Algorithm: Extended Abstract. 45-55 1999 11 Formal Asp. Comput. 1 http://link.springer.de/link/service/journals/00165/bibs/9011001/90110045.htm db/journals/fac/fac11.html#Hesselink99