--- abstract: "Model-oriented formalisms rely on a combination of safety\r\nconstraints and satisfaction of refinement obligations to demonstrate model correctness. We argue that for a significant class of models a substantial part of the desired model behaviour would not be covered by such correctness conditions, meaning that a formal development potentially ends with a correct model inadequate for its purpose. In this paper we present a method for augmenting Event-B specifications with additional proof obligations expressed in a visual, diagrammatic way. A case study illustrates how the method may be used to strengthen a model by translating use case scenarios from requirement documents into formal statements over a modelled system." accompaniment: [] book_title: 'Software Engineering for Resilient Systems, Proc. of 3rd International Workshop. September 29-30, 2011 Geneva, Switzerland' commentary: ~ completion_time: ~ composition_type: ~ conductors_id: [] conductors_name: [] contact_email: ~ copyright_holders: [] corp_creators: [] creators_id: - '"Alexei Iliasov" ' creators_name: - family: Iliasov given: Alexei honourific: '' lineage: '' data_type: ~ date: 2011 date_type: published datestamp: 2011-07-04 12:44:57 department: ~ dir: disk0/00/00/03/15 divisions: [] edit_lock_since: ~ edit_lock_until: 0 edit_lock_user: ~ editors_id: - Elena.Troubitsyna@abo.fi editors_name: - family: Troubitsyna given: Elena honourific: '' lineage: '' eprint_status: archive eprintid: 315 event_dates: ~ event_location: ~ event_title: ~ event_type: ~ exhibitors_id: [] exhibitors_name: [] fileinfo: application/pdf;http://deploy-eprints.ecs.soton.ac.uk/315/1/serene2011_submission_14%2Dfinal.pdf full_text_status: public funders: [] id_number: ~ importid: ~ institution: ~ isbn: 978-3-642-24123-9 ispublished: pub issn: ~ item_issues_comment: [] item_issues_count: 0 item_issues_description: [] item_issues_id: [] item_issues_reported_by: [] item_issues_resolved_by: [] item_issues_status: [] item_issues_timestamp: [] item_issues_type: [] keywords: ~ lastmod: 2011-10-29 18:28:41 latitude: ~ learning_level: ~ longitude: ~ lyricists_id: [] lyricists_name: [] metadata_visibility: show monograph_type: ~ note: ~ num_pieces: ~ number: 6968 official_url: ~ output_media: ~ pagerange: 9-23 pages: 15 patent_applicant: ~ pedagogic_type: ~ place_of_pub: ~ pres_type: ~ producers_id: [] producers_name: [] projects: [] publication: ~ publisher: Springer refereed: TRUE referencetext: ~ related_url_type: [] related_url_url: [] relation_type: [] relation_uri: [] rev_number: 45 series: LNCS skill_areas: [] source: ~ status_changed: 2011-10-29 18:28:41 subjects: - Event-Bsemantics - deploy_method - deploy_tooldev - deploy_tooldev_modelc - deploy_tooldev_rodinplugins succeeds: ~ suggestions: ~ sword_depositor: ~ sword_slug: ~ task_purpose: ~ thesis_type: ~ title: 'Use case scenarios as verification conditions: Event-B/Flow approach' type: book_section userid: 7 volume: ~