This 2014 paper describes it plus their supporting formalisms for “parallel, distributed, and concurrent” operation. They use them to prove QWeSST’s safety in both single-threaded and parallel scenarios.