Samuli Saukkonen

• A constructive method for the architectural design and correctness verification of real-time programs