Michael Butler Divakar Yadav An incremental development of the Mondex system in Event-B. 61-77 2008 20 Formal Asp. Comput. 1 http://dx.doi.org/10.1007/s00165-007-0061-4 db/journals/fac/fac20.html#ButlerY08