Why effective proof tool support for Z is hard - Martin, A (Software Verification Research Centre, 1997)