, gt - golem - 2011 - 001 , 2011 ach : ipc for real - time robot control .
Guarded commands, nondeterminacy and formal derivation of programs