William Schultz, Ian Dardik, Stavros Tripakis: Formal verification of a distributed dynamic reconfiguration protocol. CPP 2022: 143-152