A verification-driven framework for iterative design of controllers
Supporting Verification-Driven Incremental Distributed Design of Components.
COVER: Change-based Goal Verifier and Reasoner.
From model checking to a temporal proof for partial models
Integrating goal model analysis with iterative design
Dealing with Incompleteness in Automata-Based Model Checking
Modeling, refining and analyzing Incomplete Büchi Automata
On requirement verification for evolving statecharts specifications
On requirements verification for model refinements