Title: Verification of the FtCayuga fault-tolerant microprocessor system.  Volume I: A case study in theorem prover-based verification
Subjects: Microprocessors, Proving, Fault tolerance