Formal design and verification of a reliable computing platform for real-time control : phase 3 results / - Butler, Ricky W. (National Aeronautics and Space Administration, Langley Research Center ;, 1994)