Michael Butler: Reasoned Modelling with Event-B. SETSS 2016: 51-109