Donald Sannella Andrzej Tarlecki Mind the Gap! Abstract Versus Concrete Models of Specifications. 114-134 1996 conf/mfcs/1996 MFCS db/conf/mfcs/mfcs96.html#SannellaT96 http://dx.doi.org/10.1007/3-540-61550-4_143