O.: What causes a system to satisfy a specification (2008)

by H Chockler, J Y Halpern, Kupferman
Venue:ACM Transactions on Computational Logic 9