Email Record: Formal specification techniques for engineering modular C programs /