Initial documentation requirements for a high assurance system: lessons learned | IEEE Conference Publication | IEEE Xplore