Example 6. Formal Design of “Undo It”