system design from provably correct constructs - "martin, james . " (usa : prentice hall, 1985)