Specification and verification of sequential Java programs door