Publisher's Synopsis
The stepwise refinement method postulates a system construction route that starts with some relatively high-level specification, goes through a number of provably correct developments steps, each of which replaces some declarative, non-executable (or merely inefficient) aspects of the specification by imperati executable constructs, and ends with a