Rajeev Alur Radu Grosu Modular refinement of hierarchic reactive machines. 339-369 2004 26 ACM Trans. Program. Lang. Syst. 2 http://doi.acm.org/10.1145/973097.973101 db/journals/toplas/toplas26.html#AlurG04