Specification transformers: a predicate transformer approach to composition