Email Record: An introduction to formal program verification /