A Formal Architecture for Open Systems
(prepared with support from NSF Grant #0083075)