×

zbMATH — the first resource for mathematics

Engineering and theoretical underpinnings of retrenchment. (English) Zbl 1119.68348
Summary: Refinement is reviewed, highlighting in particular the distinction between its use as a specification constructor at a high level, and its use as an implementation mechanism at a low level. Some of its shortcomings as a specification constructor at high levels of abstraction are pointed out, and these are used to motivate the adoption of retrenchment for certain high level development steps. Basic properties of retrenchment are described, including a justification of the operation proof obligation, simple examples, its use in requirements engineering and model evolution, and simulation properties. The interaction of retrenchment with refinement notions of correctness is overviewed, as is a range of other technical issues. Two case study scenarios are presented. One is a simple digital redesign control theory problem, and the other is an overview of the application of retrenchment to the Mondex Purse development.

MSC:
68N99 Theory of software
Software:
ETPS; RAISE; TLA
PDF BibTeX XML Cite
Full Text: DOI