Kenneth R. Wood A Practical Approach to Software Engineering Using Z and the Refinement Calculus. 79-88 1993 SIGSOFT FSE http://doi.acm.org/10.1145/256428.167068 db/conf/sigsoft/fse93.html#Wood93