Formal Development of Reactive Systems 1995