Email Record: Design, specification and verification of interactive systems '99 :