SMS: Specifying real-time systems with interval logic / John Rushby, principal investigator.