Specifying fault tolerance within Stark's formalism

A general refinement methodology is presented based on ideas of E. Stark, and it is explained how these can be used for the systematic development of fault-tolerant systems. Highlights are: (1) a comprehensive exposition of Stark's temporal logic and development methodology; (2) a formalization of a general systematic approach to the development of fault-tolerant systems, accomplishing increasing degrees of coverage with each successive refinement stage; and (3) a detailed example of a multi-disk system providing stable storage, illustrating this general methodology.