Email Record: Modular specification and verification of object-oriented programs /