Email Record: Formal methods of program verification and specification /