Leo Freitas Jim Woodcock 133-154 2009 21 Formal Asp. Comput. 1-2 http://dx.doi.org/10.1007/s00165-008-0074-7 db/journals/fac/fac21.html#FreitasW09