Pragmatic application of formal methods to safety critcal systemsNorman Derek Pratt · First published 1996Open the Tome