Title: Specifying system implementations in Z