Author: Safety-Critical Systems Symposium (1st 1993 Bristol, England)