Automatic verification of fault-tolerant register emulationsPaul C. AttieHana Chockler2005CONCUR 2005