Title: Using Event-B for Critical Device Software Systems