SADLI: Functional Programming in a Safety Critical Application. - Morris F. Chudleigh; Chris Berridge; Jenny Butler; Rodney May; Ian Poole (SSS, 1996)