Ripple: a formally specified prototyping system | IEEE Conference Publication | IEEE Xplore