Conversation specification: a new approach to design and analysis of e-service composition
Hierarchical correctness proofs for distributed algorithms