Structure For Dependability by Denis Besnard & Cliff Jones