Ensuring Consistency between Designs, Documentation, Formal Specifications, and Implementations