Michael J. Butler Stepwise Refinement of Communicating Systems. 139-173 1996 27 Sci. Comput. Program. 2 db/journals/scp/scp27.html#Butler96