Coherence between spec and SUT modules