Gerard Holzmann

• NASA Formal Methods
• More Geometric Knit Blankets
• Safe at Home
• Spin Model Checker