Colin J. Fidge: Proof Obligations for Real-Time Refinement. Refine 1994: 279-305