Preserving Correctness of Requirements Evolution through Refinement in Event-B | IEEE Conference Publication | IEEE Xplore