Retrenchment and the Mondex Electronic Purse (Extended Abstract)

Some of the success stories of model based refinement are recalled, as well as some of the annoyances that arise when refinement is deployed in the engineering of large systems. The way that retrenchment attempts to alleviate such inconveniences is reviewed. The Mondex Electronic Purse formal development provides a highly credible testbed for examining how real world refinement difficulties can be treated via retrenchment. The contributions of retrenchment to integrating the real implementation with the formal development are surveyed, and the extraction of commonly occurring ‘retrenchment patterns’ is suggested

Retrenchment and the Mondex Electronic Purse (Extended Abstract)

Richard Banach , Michael Poppleton Czeslaw Jeske and Susan Stepney Department of Computer Science, University of Manchester, Manchester M13 9PL, UK, {banach,cj}@cs.man.ac.uk 2 Department of Electronics and Computer Science, University of Southampton, Highfield, Southampton SO17 1BJ, UK, [email protected] Department of Computer Science, University of York, Heslington, York YO10 5DD, UK, [email protected] Abstract. Some of the success stories of model based refinement are recalled, as well as some of the annoyances that arise when refinement is deployed in the engineering of large systems. The way that retrenchment attempts to alleviate such inconveniences is reviewed. The Mondex Electronic Purse formal development provides a highly credible testbed for examining how real world refinement difficulties can be treated via retrenchment. The contributions of retrenchment to integrating the real implementation with the formal development are surveyed, and the extraction of commonly occurring `retrenchment patterns'is suggested