The Formal Correctness of Concurrent Systems