Zhiming Liu Mathai Joseph Specification and Verification of Fault-Tolerance, Timing, and Scheduling. 46-89 1999 21 ACM Trans. Program. Lang. Syst. 1 http://doi.acm.org/10.1145/314602.314605 db/journals/toplas/toplas21.html#LiuJ99