Michael J. Butler Decomposition Structures for Event-B. 20-38 2009 IFM https://doi.org/10.1007/978-3-642-00255-7_2 conf/ifm/2009 db/conf/ifm/ifm2009.html#Butler09