“…Publish-subscribe systems have received considerable attention in commercial products and standards (e.g., [20,18]), as well as academic research systems (e.g., [4,19]). Most of these efforts have focused on the problem of constructing systems that exhibit desirable run time qualities, such as scalability, efficiency, adaptability, and security, rather than the problem of reasoning about the correctness of such systems, as in this paper.…”