Stephan Merz A More Complete TLA. 1226-1244 1999 conf/fm/1999-2 World Congress on Formal Methods https://doi.org/10.1007/3-540-48118-4_15 db/conf/fm/fm1999-2.html#Merz99