Divakar Yadav Michael Butler Formal Development of a Total Order Broadcast for Distributed Transactions Using Event-B. 152-176 2009 Methods, Models and Tools for Fault Tolerance http://dx.doi.org/10.1007/978-3-642-00867-2_8 series/lncs/5454 db/series/lncs/lncs5454.html#YadavB09