The Calculus of Refinements, a Formal Specification Model Based on Inclusions