Andreas Willig Ina Schieferdecker Specifying and Verifying the Steam-Boiler Control System with Time Extended LOTOS. 473-492 1995 conf/dagstuhl/1995fm Formal Methods for Industrial Applications db/conf/dagstuhl/fm1995.html#WilligS95 https://doi.org/10.1007/BFb0027250