Verifying formal specifications of synchronous processesPatricia P. GriffithsCharles J. Prenner1976POPL 1976