The University of Southampton
University of Southampton Institutional Repository

Retrenching the Purse: The Balance Enquiry Quandary, and Generalised and (1, 1) Forward Refinements

Banach, Richard, Jeske, Czeslaw, Poppleton, Michael and Stepney, Susan, Skowron, A, Bartol, W, Polkowski, L and Rasiowa, H(eds.) (2007) Retrenching the Purse: The Balance Enquiry Quandary, and Generalised and (1, 1) Forward Refinements Fundamenta Informaticae, 77, (1-2), pp. 29-69.

Record type: Article


Some of the success stories of model based refinement are recalled, as well as some of the annoyances that arise when refinement is deployed in the engineering of large systems. The way that retrenchment attempts to alleviate such inconveniences is briefly reviewed. The Mondex Electronic Purse formal development provides a highly credible testbed for examining how real world refinement difficulties can be treated via retrenchment. The contributions of retrenchment to integrating the real implementation with the formal development are surveyed, and the extraction of commonly occurring ‘retrenchment patterns’ is recalled. One of the Mondex difficulties, the ‘Balance Enquiry Quandary’ is treated in detail, and the way that retrenchment is able to account for the system behaviour is explained. The problem is reconsidered using generalised forward refinement, and the simplicity of the resolution of the quandary, both by retrenchment, and by generalised forward refinement, inspires the creation of a genuine (1; 1) forward refinement for Mondex, something long thought impossible. The forward treatment exhibits a similar balance enquiry quandary to the backward refinement, as it must, given that both are refinements of an atomic action to a non-atomic protocol, and the forward quandary is dealt with as easily by retrenchment as is the backward case. The simplicity of the retrenchment treatment foreshadows a general purpose retrenchment Atomicity Pattern for dealing with atomic-versus-finegrained situations.

PDF Retrench.Mondex.Bal.pdf - Other
Download (288kB)

More information

Published date: 2007
Keywords: Retrenchment, Refinement, Verification, Mondex Purse, Atomicity
Organisations: Electronic & Software Systems


Local EPrints ID: 263576
PURE UUID: 1ae41233-1a60-438a-b7e0-c65a156c0f26

Catalogue record

Date deposited: 20 Feb 2007
Last modified: 18 Jul 2017 07:44

Export record


Author: Richard Banach
Author: Czeslaw Jeske
Author: Michael Poppleton
Author: Susan Stepney
Editor: A Skowron
Editor: W Bartol
Editor: L Polkowski
Editor: H Rasiowa

University divisions

Download statistics

Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.

View more statistics

Atom RSS 1.0 RSS 2.0

Contact ePrints Soton:

ePrints Soton supports OAI 2.0 with a base URL of

This repository has been built using EPrints software, developed at the University of Southampton, but available to everyone to use.

We use cookies to ensure that we give you the best experience on our website. If you continue without changing your settings, we will assume that you are happy to receive cookies on the University of Southampton website.