Using Z. Specification, Refinement and Proof (1996)

by J Woodcock, J Davies