Juan C. Bicarregui

• Proof in VDM
• Intra-modular structuring in model-oriented specification