Extending Ina Jo with Temporal Logic

-Toward the overall goal of putting formal specifications to work has concentrated on describing only functional bepractical usein the design oflargesystems, we explore the combination havior, however. Specifying other properties, such as of two specification methods: using temporal logic to specify concurrency properties and using an existing specification language, Ina Jo TM, concurrency, reliability, security, performance, and realto specify functional behavior of nondeterministic systems. In this patime behavior, is as much in the customer's interest as in per, we give both informal and formal descriptions of both current Ina specifying functional behavior. The importance of speciJo and lna Jo enhanced with temporal logic. We include details of a fying these kinds of properties may be more prominent in simple example to demonstrate the use of the proof system and details the context of large systems than for small programs-of an extended example to demonstrate the expressiveness of the enhanced language. We discussat length our language design goals, deperhaps this is one of the reasons why some of these propcisions, and their implications. The Appendix contains a list ofaxioms, erties have so far eluded rigorous methods of specificarules of inference, derived rules, and theorem schemata for the ention. hanced formal system. Combining methods, languages, and models of speci