Email Record: Interactive theorem proving and program development :