Email Record: High-Integrity System Specification and Design /