Title: Using formal specifications of a human-computer interface