Abstractions for network update
Interactive Theorem Proving and Program Development