Author: Safety-Critical Systems Symposium (4th 1996 Leeds, England)