Verification by Way of Refinement: A Case Study in the Use of Coq and TLA in the Design of a Safety Critical System.

Philip Johnson-Freyd, Geoffrey C. Hulette, Zena M. Ariola

Browse the full FMICS paper archive.