CAV 1992A Case Study in Safety-Critical DesignGlenn BrunsPDFDOI 10.1007/3-540-56496-9_18dblpBibTeXAbstract elided by the publisher.