Pragmatic application of formal methods to safety critical systems. - Norman Derek Pratt (1995)