Using Event-B for Critical Device Software Systems | lit.salon