Formal verification of timed synchronous dataflow graphs using lustre
scientific article; zbMATH DE number 7377680