Temporal Verification of Reactive Systems sidottuEnglanti, 1995