Email Record: Formal methods for open object-based distributed systems :