AD-A 2 6 2 848 A Temporal Proof Methodology for Reactive Systems