A Refinement Calculus for Promela | IEEE Conference Publication | IEEE Xplore