Hans Langmaack The ProCoS Approach to Correct Systems. 253-275 1997 13 Real-Time Systems 3 db/journals/rts/rts13.html#Langmaack97