Tatjana Kapus Zmago Brezocnik Verification of XTP Context Management Closing Procedure in Style of TLA. 23-52 1997 29 Sci. Comput. Program. 1-2 db/journals/scp/scp29.html#KapusB97