Example 6.
Formal Design of “Undo It”