Transforming designs towards implementations

We are interested in constructing safety-critical systems from their requirements specification. Our approach is the following: we start with requirements formalized in Duration Calculus (DC). These requirements are transformed to another form in DC, expressing the design of the system. The design is then transformed to a joint action system expressed in DisCo language. The specifications in DC emphasize properties the system must have, whereas the joint action system is closer to description how the system must be implemented. The philosophy is that all the involved transformations must be proven correct. This paper focuses on the transformation from a design in DC to a joint action system in DisCo.