Proving correctness properties of a replicated synchronous program - Mancini, Luigi V.; Pappalardo, Giuseppe (1988)