Ian J. Hayes VDM and Z: A Comparative Case Study. 76-99 1992 4 Formal Asp. Comput. 1 db/journals/fac/fac4.html#Hayes92