John Derrick Graeme Smith Linear Temporal Logic and Z Refinement. 117-131 http://dx.doi.org/10.1007/978-3-540-27815-3_13 2004 conf/amast/2004 AMAST db/conf/amast/amast2004.html#DerrickS04