Reasoning about Object-Z specifications | IEEE Conference Publication | IEEE Xplore