Author: NASA Formal Methods Workshop (5th 2000 Williamsburg, Va.)