Using Z: Specification, Refinement, and Proof

GPTKB entity