Wolfgang Polak Formal methods in practice. 75-85 2002 42 Sci. Comput. Program. 1 db/journals/scp/scp42.html#Polak02