Loading paper
A formal approach for correct-by-construction system substitution | Tomesphere