The Theory and Practice of Refinement: Approaches to the Formal Development of Large-Scale Software Systems