Author: NASA Formal Methods Workshop (3rd 1995)