Leo Freitas Jim Woodcock Mechanising Mondex with Z/Eves. 117-139 2008 20 Formal Asp. Comput. 1 http://dx.doi.org/10.1007/s00165-007-0059-y db/journals/fac/fac20.html#FreitasW08