Occam in the specification and verification of microprocessors - Roscoe, A (Phil Trans R. Soc. Lond A, 1992)