Donald Sannella Andrzej Tarlecki Algebraic specification and formal methods for program development: what are the real problems? 134-138 1990 41 Bulletin of the EATCS db/journals/eatcs/eatcs41.html#SanellaT90