Stepwise refinement and verification in box-structured systems | IEEE Journals & Magazine | IEEE Xplore