ThelanguageLUSTRE,anditsassociatedverificationtoolLESAR,canbeusedtodesignaprogram,tospecifyitscriticalproperties,andtoverifytheseproperties