David Jason Scholefield

• A refinement calculus for real-time systems