H. R. Nielson, T. Amtoft, and F. Nielson, “Behaviour Analysis and Safety Conditions: a Case Study in CML”, DPB, vol. 26, no. 528, Oct. 1997.