Lessons from Using Z to Specify a Software Tool. - Martin Neil; Gary Ostrolenk; Mary Tobin; Mark Southworth (IEEE Trans. Software Eng., 1998)