In: Proc. of the IFAC Symposium Safety of Computer Control Systems (SAFECOMP'88): Safety Related Computers in an Expanding Market, Fulda, pages 61-65. Oxford: Pergamon Press, 1989.
Abstract: It was found that errors in documentation are a significant source of hazards. In order to overcome this problem, the ANNADOC system was developed. This provides a graphical system for structural description of software, and a text based system for describing system functions. The system provides a translation from the English language descriptions to a Petri Net.