K. Mani Chandy Michel Charpentier An Experiment in Program Composition and Proof. 7-21 2002 20 Formal Methods in System Design 1 db/journals/fmsd/fmsd20.html#ChandyC02