Juan Bicarregui Jeremy Dick Brian Matthews Eoin Woods Making the Most of Formal Specification Through Animation, Testing and Proof. 53-78 1997 29 Sci. Comput. Program. 1-2 db/journals/scp/scp29.html#BicarreguiDMW97