Ping Zhou Jozef Hooman Formal Specification and Compositional Verification of an Atomic Broadcast Protocol. 119-145 1995 9 Real-Time Systems 2 db/journals/rts/rts9.html#ZhouH95 http://dx.doi.org/10.1007/BF01088854