Ana Cavalcanti Augusto Sampaio Jim Woodcock An Inconsistency in Procedures, Parameters, and Substitution in the Refinement Calculus. 87-96 1999 33 Sci. Comput. Program. 1 db/journals/scp/scp33.html#CavalcantiSW99