Dale Skeen Michael Stonebraker A Formal Model of Crash Recovery in a Distributed System. 219-228 1983 9 IEEE Trans. Software Eng. 3 db/journals/tse/tse9.html#SkeenS83