Text this: Formal methods for trustworthy computer systems (FM89) :