Verifying temporal properties without using temporal logic - Alpern, Bowen; Schneider, Fred B. (1985)