Derivation of Z functional input/output refinement proof rules | IEEE Conference Publication | IEEE Xplore