Affiliation: | (1) Centre for Requirements and Foundations, Oxford University Computing Laboratory, Parks Road, OX1 3QD Oxford, UK;(2) Manchester University, Manchester, UK;(3) Nottingham University, Nottingham, UK;(4) Santa Clara University, Santa Clara, CA, USA |