https://123dok.org/document/qmj626e7-formal-method-checking-laboratory-giuseppe-spallitta-giuseppe-spallitta.html