Christie Bolton Using the Alloy Analyzer to Verify Data Refinement in Z. 23-44 2005 137 Electr. Notes Theor. Comput. Sci. 2 http://dx.doi.org/10.1016/j.entcs.2005.04.023 db/journals/entcs/entcs137.html#Bolton05