Using an extension of CT L∗ for specification and verification of sequential reactive systemsстатья