Temporal verification of reactive systems: Safety (1995)

by Z Manna, A Pnueli