How to reconcile formal specifications and automatic programming: the Descartes system | IEEE Conference Publication | IEEE Xplore