Correct-by-Construction Concurrency

by Edwin Brady , Kevin Hammond