Proving refinement transformations for deriving high-assurance software | IEEE Conference Publication | IEEE Xplore