Email Record: Industrial-strength formal methods in practice /