"Modular reasoning about structured TLA specifications."

Georg Rock, Werner Stephan, Andreas Wolpers (1998)
a service of Schloss Dagstuhl - Leibniz Center for Informatics