What Causes a System to Satisfy a Specification?

Hana Chockler, Joseph Y. Halpern, Orna Kupferman

Even when a system is proven to be correct with respect to a specification, there is still a question of how complete the specification is, and whether it really covers all the beh…