Lessons from using Z to specify a software tool | IEEE Journals & Magazine | IEEE Xplore